Restrict invokig `subprocess.run` via an internal API

[behnazh-w]

We need to manage and restrict the environment passed to the subprocess.run invocation by creating an internal API. We need to create an allow list for the env argument to prevent the subprocess from accessing sensitive data, such as GitHub tokens. We can also make sure that the dangerous argument shell=True is never used.