Prevent control characters

Editor assessment

This commit patches CVE-2026-40281. The subject says to prevent control characters, scoped to exitool, which points at the component and the action but not at the consequence, so the reader must infer that terminal escapes or log injection were the concern. Type and scope fit, and the line is clean and imperative. No body accompanies it, leaving unstated which outputs are now filtered, whether existing behavior changes, and what input previously passed through. For a small hardening patch that brevity may be acceptable, but the message still stops short of explaining why control characters mattered. Understandable, thin.