fix(security): sanitize paths and prevent shell scripts

[wellwelwel]

New Protective Measures

• Blocks access above target directory by filtering ../ and / paths, for example:
  • /root will be sanitized to ./root
  • ../../etc/secret will be sanitized to ./etc/secret
• Normalizes paths according to the OS, allowing all collaborators to use the same path, each using their own OS:
  • \ for Windows
  • / for Linux and macOS
• Normalizes paths by filtering unusual path characters, for example:
  • <>:|^?*
• Prevents shell scripts by setting shell to false in spawn options, ensuring that only secure arguments will be used.