fix: revert to unescaped regex capture grouping in workflow:rules

The workflow:rules use Ruby regex. The scripts use Bash regex. The escaping rules for parentheses and pipes in groups and captures are different...