Add a `mustNotMatch` option to `RegexEvaluator`

[fkapsahili]

RegexEvaluator only checks that a pattern matches. Sometimes you want the opposite, like failing if the output contains a refusal or a banned phrase. A mustNotMatch flag would cover negative assertions without regex lookahead tricks.