disallow shell scripting in web by default

packages/api/src/controllers/config.js

@@ -34,6 +34,7 @@ module.exports = {
       singleDatabase: connections.singleDatabase,
       hideAppEditor: !!process.env.HIDE_APP_EDITOR,
       allowShellConnection: platformInfo.allowShellConnection,
+      allowShellScripting: platformInfo.allowShellConnection,
       permissions,
       ...currentVersion,
     };