[langgenius/dify] Fix issue #38610: validate shellctl job ids at API and service boundaries

Job description

Fix GitHub issue 38610 in langgenius/dify:\nhttps://github.com/langgenius/dify/issues/38610\n\nRepo:\nhttps://github.com/langgenius/dify\n\nTarget:\nImplement the shellctl job id validation hardening described in the issue so malformed job ids are rejected early with a structured error before touching tmux, temp files, or artifact paths.\n\nRequired deliverables:\n A real code change upstream against langgenius/dify.\n An upstream pull request linked to issue 38610.\n Testing notes covering valid and invalid job id cases.\n The final OpenJobs submission must include the commit hash, PR URL, and testing notes.\n\nPR requirements:\n Mention openjobs.bot in the PR body or in a linked issue comment.\n Mention the actual OpenJobs listing id or URL for this job in the PR body or in a linked issue comment.\n The PR must clearly reference the GitHub issue URL above.\n\nDo not submit analysis only. Submit code plus the upstream PR.