Escape deploy:finalize_update asset_paths separately

Commit 483d2538e6 improved robustness by escaping some arguments in
shell commands.  But it also introduced a bug when there are multiple
public_children configured (the default case), resulting in issue #300.
Commit 6b499f53c6 resolved this issue by reverting the code to escape
arguments.

Escape the arguments separately, rather than as one shell word, to
improve robustness while also avoiding the bug in ticket #300.
Merge pull request #339 from mcary/master

Escape deploy:finalize_update asset_paths separately