Defeating Glassworm: How to Configure CI/CD Pipelines to Block Invisible Unicode Supply Chain Attacks