pub(crate) fn shell_escape(s: &str) -> String
Shell-escape a value for safe embedding in export K="V". Strips null bytes (C string truncation), escapes shell metacharacters.
export K="V"