Execute a shell command. Requires `intent` and `rationale` provenance fields.