Add option to pass through arguments to brwap, use shlex for dry-run

src/cli.rs

@@ -58,6 +58,10 @@ pub struct Args {
     #[arg(long = "mask", value_name = "PATH", action = clap::ArgAction::Append)]
     pub mask: Vec<PathBuf>,
 
+    /// Pass an arbitrary argument directly to bwrap (repeatable)
+    #[arg(long = "bwrap-arg", value_name = "ARG", action = clap::ArgAction::Append)]
+    pub bwrap_args: Vec<String>,
+
     /// Command and arguments to run inside the sandbox
     #[arg(trailing_var_arg = true, allow_hyphen_values = true)]
     pub command_and_args: Vec<OsString>,