Remove shell=True from Windows subprocess calls

[jlowin]

Windows subprocess calls were using shell=True unnecessarily, which invokes cmd.exe as an intermediary and increases attack surface. While these calls are user-initiated and don't accept untrusted input, removing shell=True follows security best practices and eliminates potential future concerns.

The change replaces shell=True with explicit command construction where needed. This should have no impact on functionalit.