Fix HybridPackager failing on paths with spaces or apostrophes - #646

Summary

HybridPackager fails when the job directory, archive name, or a sub-packager's archive path contains a space or an apostrophe. Those paths are inserted unquoted into the tar, gzip, and rm commands: spaces split them into separate arguments, while apostrophes break shell parsing.

This quotes each file path with shlex.quote(), as #637 and #645 did for PatternPackager and GitArchivePackager. Otherwise the commands are unchanged. Both extract_at_root layouts and the cleanup of temporary files and sub-archives work as before.

Folder names inside the tar transform expressions and executor extraction commands are outside this change.

Tests

• Added 12 regression cases covering both path characters, all three path locations, and both layouts. Sub-packagers are mocks returning real archives; tar, gzip, and rm run for real. The test checks the combined archive's file names and contents, and removal of temporary files and sub-archives.
• All 12 cases fail on unmodified main; the 2 existing hybrid tests pass. With the fix, all 42 packaging tests pass.
• Full suite on Linux with Python 3.11.9 and locked dependencies: 1,712 passed, 1 deselected, 1 xfailed. Run with a fresh /tmp mount to isolate host temporary files. Pytest exited successfully; Ray then printed an ignored ModuleNotFoundError from its shutdown hook.
• Full-repository Ruff lint and formatting checks and git diff --check pass.
• Not run on macOS; the BSD tar transform expressions are unchanged.