fix: escape filename before sourcing