We should pass the header command literally to the CLI so the expansion happens in that context (where CODER_URL will be set) instead. I think we can do this by simply wrapping the --header-command ...