fix: shell injection in gitCommit projectDir, test directory cleanup

- gitCommit() now uses double quotes for projectDir consistently with
  gitPush/gitPull/gitStatus (was single quotes, breaking on paths with
  apostrophes like "John's Project")
- Test suite auto-cleans test_output_formats/ directory via Catch2
  event listener after all tests complete (was leaving empty dir)

tests/test_open_formats.cpp

@@ -16,6 +16,16 @@ static void ensureTestDir() {
     std::filesystem::create_directories(TEST_DIR);
 }
 
+static void cleanupTestDir() {
+    std::filesystem::remove_all(TEST_DIR);
+}
+
+struct CleanupListener : Catch::EventListenerBase {
+    using EventListenerBase::EventListenerBase;
+    void testRunEnded(const Catch::TestRunStats&) override { cleanupTestDir(); }
+};
+CATCH_REGISTER_LISTENER(CleanupListener)
+
 // ============== WOB Tests ==============
 
 TEST_CASE("WOB save and load round-trip", "[wob]") {