fix(security): eliminate API key leakage via ps aux across all three execution layers#1

Open

dumko2001 wants to merge 3 commits intomainfrom

security/harden-process-execution

Commits on Mar 19, 2026

fix(runner): safe argv execution primitives; fix opts.env overwrite
dumko2001
committed
fix(cli): replace shell-string commands with argv arrays
dumko2001
committed
fix(credentials): use env-lookup form for --credential; secrets never in argv
dumko2001
committed