fix(security): harden the exec/FS trust boundary in server_actions (#59)

fix(security): harden the exec/FS trust boundary in server_actions (#59) #117