Bug 1643661 Fix shell quoting with hg commands r=mtabara

shellcheck will moan about this, as it's potentially unsafe

Differential Revision: https://phabricator.services.mozilla.com/D78486

taskcluster/docker/periodic-updates/scripts/periodic_file_updates.sh

@@ -406,8 +406,8 @@ function clone_repo {
     ${HG} robustcheckout --sharebase /tmp/hg-store -b default "${HGREPO}" "${REPODIR}"
   fi
 
-  ${HG} -R ${REPODIR} pull
-  ${HG} -R ${REPODIR} update -C default
+  ${HG} -R "${REPODIR}" pull
+  ${HG} -R "${REPODIR}" update -C default
 }
 
 # Copies new HSTS files in place, and commits them.

taskcluster/docker/python-dependency-update/scripts/update_pipfiles.sh

@@ -30,8 +30,8 @@ function clone_repo {
     ${CLONE_CMD}
   fi
 
-  ${HG} -R ${REPODIR} pull
-  ${HG} -R ${REPODIR} update -C default
+  ${HG} -R "${REPODIR}" pull
+  ${HG} -R "${REPODIR}" update -C default
 }
 
 # Push all pending commits to Phabricator