fn format_flags(flags: &[String]) -> String
Renders a flag vector so token boundaries survive: shell_words::join.
shell_words::join