single quotes `'` become part of argument on Windows
- policy: require double quotes `"` for globs
- fix resolver logic and new quote policy

add generalized argument validation helpers