fix(scripts): prevent command injection in expo-upload-sourcemaps #3968

Job	Run time
auth_token_check / auth_token_check	2s
Ready-to-merge gate / Missing "ready-to-merge" label	3s
diff_check / diff_check	7s
metrics (legacy, ios)	20m 58s
metrics (new, android)	11m 47s
metrics (new, ios)	14m 18s
metrics (legacy, android)	11m 20s
Build RN 0.71.19 legacy hermes ios production no	6m 7s
Build RN 0.71.19 legacy jsc ios production no	6m 14s
Build RN 0.71.19 legacy jsc android production no	4m 45s
Build RN 0.83.0 legacy hermes android production no	5m 42s
Build RN 0.83.0 legacy hermes ios production no	7m 58s
Build RN 0.71.19 legacy hermes android production no	4m 41s
Build RN 0.83.0 new hermes ios production no	7m 48s
Build RN 0.83.0 new hermes android production no	5m 15s
Build RN 0.83.0 legacy hermes ios production static	10m 58s
Build RN 0.83.0 new hermes ios production static	10m 34s
Build RN 0.83.0 legacy hermes ios production dynamic	8m 11s
Test RN 0.83.0 legacy hermes android production no	6m 7s
Test RN 0.83.0 new hermes android production no	6m 12s
Test RN 0.83.0 legacy hermes ios production no	16m 8s
Test RN 0.83.0 new hermes ios production no	11m 45s
	2h 57m 0s

Provide feedback