System calls to gitlab-shell were using unsanitized user input

Using an alternative form of system that will ensure each component is passed as an argument and not evaluated as a command.