cron, email and image_read call util/exec's run()/hasCommand() instead of
child_process.execSync; the Telegram wizard uses fetch instead of a shell
curl. Same assertions, new seams; the wizard also gains a test that a
non-token value is never sent.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>