fix: harden deepseek official remote43 import closure

scripts/remote43_patched_stack_lib.sh

@@ -70,11 +70,14 @@ render_remote43_crm_env() {
   local crm_port="$1"
   local sqlite_dsn="$2"
   local admin_token="$3"
+  local sqlite_dsn_q admin_token_q
+  printf -v sqlite_dsn_q '%q' "$sqlite_dsn"
+  printf -v admin_token_q '%q' "$admin_token"
 
   cat <<EOF
 SUB2API_CRM_LISTEN_ADDR=127.0.0.1:$crm_port
-SUB2API_CRM_SQLITE_DSN=$sqlite_dsn
-SUB2API_CRM_ADMIN_TOKEN=$admin_token
+SUB2API_CRM_SQLITE_DSN=$sqlite_dsn_q
+SUB2API_CRM_ADMIN_TOKEN=$admin_token_q
 SUB2API_CRM_RECONCILE_WORKER_ENABLED=false
 EOF
 }