Move regexp from rule 921200 to ra file

I wonder why we don't have this one already in regex assembly format 🧐

_Originally posted by @fzipi in https://github.com/coreruleset/coreruleset/pull/4385#discussion_r2637390286_
            