do not rely on shellwords

IO.popen does not require going through a shell, so don't.
bump version to 1.0.0 and fix up gemspec