fix: quote variables in evals PR comment step for shellcheck SC2086

shellcheck disable directives in GitHub Actions run blocks only cover
the next command, not the entire script. Quote $COMMENT_ID and PR
number variables directly instead.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.github/workflows/evals.yml

@@ -207,8 +207,8 @@ jobs:
             --jq '.[] | select(.body | startswith("## E2E Evals")) | .id' | tail -1)
 
           if [ -n "$COMMENT_ID" ]; then
-            gh api repos/${{ github.repository }}/issues/comments/$COMMENT_ID \
+            gh api "repos/${{ github.repository }}/issues/comments/${COMMENT_ID}" \
               -X PATCH -f body="$BODY"
           else
-            gh pr comment ${{ github.event.pull_request.number }} --body "$BODY"
+            gh pr comment "${{ github.event.pull_request.number }}" --body "$BODY"
           fi