Authenticated code execution via unquoted log path

OS command injection in Dokploy 0.28.8 and earlier allows remote authenticated users to execute commands on managed servers. The /listen-deployment handler checks that logPath resolves beneath /etc/dokploy but interpolates it unquoted into an SSH tail command, so Linux shell metacharacters remain executable. Any organization member can reach the WebSocket outside tRPC permission checks when the organization has a managed server with an SSH key, yielding that SSH user's access to the server.