v1.18.43: Cron environment isolation

• Keep cron job execution on the supervised process path without starting a login shell.
• Prevent shell profiles from bypassing the cron environment allowlist or adding hidden startup side effects.
• Cover the profile-loading regression.