Use eval for command inputs to preserve shell semantics

Direct ${VAR} expansion doesn't recognize VAR=value prefix assignments
after parameter expansion, breaking the default 'V=1 make build'. Using
eval restores the original shell parsing behavior.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: tashian

.github/workflows/codeql-analysis.yml

@@ -115,7 +115,7 @@ jobs:
         env:
           CODEQL_BUILD_CMD: ${{ inputs.codeql-build-cmd }}
         run: |
-          ${CODEQL_BUILD_CMD}
+          eval "${CODEQL_BUILD_CMD}"
       -
         name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4

.github/workflows/goBuild.yml

@@ -93,4 +93,4 @@ jobs:
         name: Build
         env:
           BUILD_CMD: ${{ inputs.build-command }}
-        run: ${BUILD_CMD}
+        run: eval "${BUILD_CMD}"

.github/workflows/goTest.yml

@@ -141,7 +141,7 @@ jobs:
         env:
           TEST_CMD: ${{ inputs.test-command }}
           GOTESTSUM_JSONFILE: gotestsum.json
-        run: ${TEST_CMD}
+        run: eval "${TEST_CMD}"
 
       -
         name: Annotate Test Suite Results