[flake8-bandit] Make S604 and S609 examples error out-of-the-box

[MeGaGiGaGon]

Summary

Part of #18972

Both in one PR since they are in the same file.

S604

This PR makes call-with-shell-equals-true (S604)'s example error out-of-the-box

Old example

import subprocess

user_input = input("Enter a command: ")
subprocess.run(user_input, shell=True)

New example

import my_custom_subprocess

user_input = input("Enter a command: ")
my_custom_subprocess.run(user_input, shell=True)

The old example doesn't raise S604 because it gets overwritten by subprocess-popen-with-shell-equals-true (S602) (which is a good idea to prevent two lints saying the same thing from being raised)

S609

This PR makes unix-command-wildcard-injection (S609)'s example error out-of-the-box

Old example

import subprocess

subprocess.Popen(["chmod", "777", "*.py"])

New example

import subprocess

subprocess.Popen(["chmod", "777", "*.py"], shell=True)

I'm not familiar enough with subprocess to know why shell=True is required to make S609 raise here, but it works.

Test Plan

N/A, no functionality/tests affected

[github-actions]

ruff-ecosystem results

Linter (stable)

✅ ecosystem check detected no linter changes.

Linter (preview)

✅ ecosystem check detected no linter changes.

[dylwil3]

makes sense, thanks!