Validate derived slugs from --dir option to prevent corrupted bootstrap.php

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>

Author: Copilot

src/Scaffold_Command.php

@@ -828,13 +828,6 @@ private function scaffold_plugin_theme_tests( $args, $assoc_args, $type ) {
 
 		if ( ! empty( $args[0] ) ) {
 			$slug = $args[0];
-			if ( in_array( $slug, [ '.', '..' ], true ) ) {
-				WP_CLI::error( "Invalid {$type} slug specified. The slug cannot be '.' or '..'." );
-			}
-			// Validate slug contains only alphanumeric characters, underscores, and dashes.
-			if ( ! preg_match( '/^[a-zA-Z0-9_-]+$/', $slug ) ) {
-				WP_CLI::error( "Invalid {$type} slug specified. The slug can only contain alphanumeric characters, underscores, and dashes." );
-			}
 			if ( 'theme' === $type ) {
 				$theme = wp_get_theme( $slug );
 				if ( $theme->exists() ) {
@@ -869,6 +862,14 @@ private function scaffold_plugin_theme_tests( $args, $assoc_args, $type ) {
 			WP_CLI::error( "Invalid {$type} specified." );
 		}
 
+		// Validate slug contains only alphanumeric characters, underscores, and dashes.
+		if ( in_array( $slug, [ '.', '..' ], true ) ) {
+			WP_CLI::error( "Invalid {$type} slug specified. The slug cannot be '.' or '..'." );
+		}
+		if ( ! preg_match( '/^[a-zA-Z0-9_-]+$/', $slug ) ) {
+			WP_CLI::error( "Invalid {$type} slug specified. The slug can only contain alphanumeric characters, underscores, and dashes." );
+		}
+
 		$name    = ucwords( str_replace( '-', ' ', $slug ) );
 		$package = str_replace( ' ', '_', $name );