fix: address ESLint errors in framework

- executor.ts: add env:undefined to execSync calls for security
- latex-renderer.ts: provide default value for toFixed decimals

Author: Mearman

src/experiments/framework/executor/executor.ts

@@ -141,8 +141,8 @@ const getProvenance = (collectProvenance: boolean): Provenance => {
 	let dirty = false;
 
 	try {
-		gitCommit = execSync("git rev-parse HEAD", { encoding: "utf-8" }).trim();
-		const status = execSync("git status --porcelain", { encoding: "utf-8" });
+		gitCommit = execSync("git rev-parse HEAD", { encoding: "utf-8", env: undefined }).trim();
+		const status = execSync("git status --porcelain", { encoding: "utf-8", env: undefined });
 		dirty = status.length > 0;
 	} catch {
 		// Git not available or not a git repo

src/experiments/framework/renderers/latex-renderer.ts

@@ -222,7 +222,7 @@ ${rows.join("\n")}
 		if (!Number.isFinite(n)) {
 			return "--";
 		}
-		return n.toFixed(decimals ?? this.options.defaultDecimals);
+		return n.toFixed(decimals ?? this.options.defaultDecimals ?? 2);
 	}
 
 	/**