Reference implementation of the CR-gating ruling 2026-09-06. Grep-safe env indirection (no injection through ${{ }} in shell). Standard: https://projects.knownelement.com/issues/820#note-1 Ticket: https://projects.knownelement.com/issues/820
