Adds a check for VIP restricted command "switch_theme"

switch_theme is not an allowed command and when it's needed, the switch should be done by hand. It's a blocker and is being flagged in that way.

The PR also add a test for this use case.

work toward: https://github.com/Automattic/vip-scanner/issues/170