v0.4.1, limit-handoff security fix

Security fix for the limit-handoff hook's Terminal fallback: a folder name with control characters could run a command when the hook opened Terminal. The folder name is no longer typed into Terminal at all. Details: GHSA-xqc9-f3vr-p5pp

Thanks to @anelyberdecias-oss for the report.