[WM] add CWD to allowed-commands only when running tests

The miner.ftp client lib we're using in the tests always issues a CWD on
connect. We'd rather not have that be allowed in production, so this
adds it to the allowed list in the test `run-server` fixture only.