doubledash convention in cask external commands

as well as full paths, and explicit '-' for stdin, following the same
conventions used in our Ruby codebase.