Proves a poisoned ~/.gstack/slug-cache file cannot inject shell metacharacters
into gstack-slug output (the value consumed by eval). Verified red when the
cache-read sanitization is removed.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>