fix(scripts): prevent command injection in expo-upload-sourcemaps #3943

Job	Run time
Ready-to-merge gate / Missing "ready-to-merge" label	4s
auth_token_check / auth_token_check	2s
diff_check / diff_check	9s
metrics (new, android)	14m 14s
metrics (legacy, ios)	25m 2s
Build RN 0.83.0 legacy hermes android production no	5m 26s
Build RN 0.83.0 new hermes android production no	5m 52s
Build RN 0.71.19 legacy jsc ios production no	6m 52s
Build RN 0.71.19 legacy jsc android production no	4m 59s
Build RN 0.83.0 legacy hermes ios production static	8m 34s
Build RN 0.71.19 legacy hermes ios production no	6m 51s
Build RN 0.83.0 legacy hermes ios production no	8m 7s
metrics (legacy, android)	21m 59s
Build RN 0.83.0 new hermes ios production no	8m 16s
Build RN 0.83.0 new hermes ios production static	9m 13s
Build RN 0.83.0 legacy hermes ios production dynamic	8m 45s
metrics (new, ios)	19m 44s
Build RN 0.71.19 legacy hermes android production no	4m 49s
Test RN 0.83.0 new hermes ios production no	7m 43s
Test RN 0.83.0 legacy hermes ios production no	17m 18s
Test RN 0.83.0 new hermes android production no	6m 33s
Test RN 0.83.0 legacy hermes android production no	6m 42s
	3h 17m 14s

Provide feedback