executable_has_shebang

Every file with +x set must begin with #!. Catches plain text files accidentally marked executable.

- id: executables-have-shebangs
  kind: executable_has_shebang
  paths: "**"
  level: error