Shell injection via CLI_ARGS interpolated into sh -c command templates

[consigcody94]

Found via code audit. src/nix-dispatcher/src/commands.rs:105-114. task_interpolator.rs does raw string .replace of {{.CLI_ARGS}} with unsanitized user input fed to sh -c.