fix: remove unsafe exec() in rtl.c

[orbisai0security]

Summary

Fix critical severity security issue in init/garden/rtl/crt/rtl.c.

Vulnerability

Field	Value
ID	V-009
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-009
File	init/garden/rtl/crt/rtl.c:2330
CWE	CWE-120

Description: The init process (PID 1) — the first and most privileged process on the system — executes code containing a confirmed format string vulnerability (rtl.c:2330) and a confirmed stack buffer overflow (rtl.c:2684-2685). Because init runs with maximum system privileges and no privilege separation, any successful exploitation of these flaws grants the attacker complete, unrestricted control of the operating system without requiring any additional privilege escalation steps.

Changes

• init/garden/rtl/crt/rtl.c

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security