fix(cli): keep --config through the attested re-exec, run worktree setup outside the sandbox, scan only tps's own arguments (cli#516) - #648

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.