Fix Oxide scanner bugs

[philipp-spiess]

Fixes #15632
Fixes #15740

This PR fixes a number of Oxide scanner bugs reported over various channels, specifically:

• When using the Svelte class shorthand split over various lines, we weren't extracting class names properly:

  <div
    class:underline={isUnderline}>
  </div>

• We now extract classes when using the class shortcut in Angular:

  <div [class.underline]=\"bool\"></div>

• We now validate parentheses within arbitrary candidates so that we don't consume invalid arbitrary candidates anymore which allows us to parse the following case properly:

  const classes = [wrapper("bg-red-500")]

Test plan

Added unit tests

[paolominel]

in version 4.0.1 the bug is still present (almost for angular shorthand syntax)

[philipp-spiess]

@paolominel What's the exact file you've used that doesn't work?

[paolominel]

I use tailwind classes in angular host component.
i tried something like:

..., host: { "[class.underline]": "active()" }

active variable was a signal inside the relative angular component.

this class was not fired and not compiled during tailwind class scanning.
if i use not optional syntax ("class": "underline"), everything works well.

[paolominel]

still present in version 4.0.3. tried this morning after library upgrade