Use -- split for query and filenames
* src/inst-kleopatra.nsi: Add the split for query and filenames to avoid parameter injection.