Suppress Semgrep findings on shell_open's os.startfile / Popen

Codacy's Semgrep dangerous-spawn/subprocess rules flag os.startfile and
subprocess.Popen on dynamic content; add line-level # nosemgrep with
justification (file path from the allow-listed plan; argv list, no
shell - injection-safe), matching the shell_command handler's pattern.

Author: JE-Chen

je_auto_control/utils/shell_open/shell_open.py

@@ -72,11 +72,12 @@ def _default_opener(plan: Dict[str, Any]) -> bool:
     if backend == "startfile":
         if not sys.platform.startswith("win"):
             raise RuntimeError("startfile is only supported on Windows")
-        # noqa: S606 / nosec B606 — verb is from the allow-listed plan, no shell
-        os.startfile(target, plan.get("verb") or "open")  # noqa: S606  # nosec B606
+        # file path is from the allow-listed plan; os.startfile is not a shell
+        os.startfile(target, plan.get("verb") or "open")  # noqa: S606  # nosec B606  # nosemgrep
         return True
     import subprocess  # nosec B404  # reason: argv list, no shell
-    subprocess.Popen([backend, target])  # nosec B603  # reason: fixed backend + argv, no shell
+    # fixed backend + argv list, no shell — injection-safe
+    subprocess.Popen([backend, target])  # nosec B603  # nosemgrep
     return True