restricted mode - support STATEFUL_SET_ORDINAL in env from CR - JDK_JAVA_OPTIONS and JAVA_ARGS_APPEND

[gtully]

The escape pattern is currently incorrect and needs a fix.
The substitution should be dependent on use and needs to apply to the two relevant env vars, prepend: JDK_JAVA_OPTIONS, and JAVA_ARGS_APPEND ... for append.