CLSA-2026-1792770120 rpm: Fix of CVE-2026-84837

CVE-2026-84837: do not macro expand or shell interpret the tarball file name passed to rpmbuild -t...