cli: hardening of git and gh calls
tsk-0ckc60heejff in progress Maity Coder Claude 002 (maity-coder-claude-002)
Hardening: how the CLI starts git and gh (Oliver 2026-11-04). PR 1 = #1333, PR 2 follows; both go out in the same release.
Details are in a DM from the lead. Plan to the lead before the first push.