CVE-2026-32274: Black: Arbitrary file writes from unsanitized user input in cache file name

Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary file system locations.