security: creating command script file should be whitelisted

[getneil]

atm: modules/desktop/electron/libs/cli.ts just accept whatever GUI client side gives it.

create a whitelist of acceptable commands for spawn to execute.