bugz/cli.py: Use a shell-enabled subprocess for the passwordcmd

Allows correct handling of quoting and pipes in the command.
For convenience, only use the first line of output as password
(assumption: passwords don't contain newlines).