Suricata

--service-install and --service-change-params quote the executable but append other arguments unquoted. Paths containing spaces, such as C:\Program Files\Suricata\suricata.yaml, are split when the service starts. This can prevent startup through invalid paths or unwanted positional arguments becoming part of the BPF filter. Confirmed by source inspection in 8.0.7 and main at 9451642a28; separate from the executable-path fix in #8600. Preserve argument boundaries using proper Windows quoting and escaping in both service-registration paths.