GHSA-jj82-76v6-933r: OpenClaw's exec allowlist wrapper analysis did not unwrap env/shell dispatch chains

system.run exec allowlist analysis treated wrapper binaries as the effective executable and did not fully unwrap env/shell-dispatch wrappers.

This allowed wrapper-smuggled payloads (for example env bash -lc ...) to satisfy an allowlist entry for the wrapper while executing non-allowlisted commands.