harden: reject shell=True in run_command#3132

PascalThuet wants to merge 1 commit into

github:maingithub/spec-kit:mainfrom

PascalThuet:split/reject-shell-truePascalThuet/spec-kit:split/reject-shell-trueCopy head branch name to clipboard