pkg/subscriptions: use securejoin for the container path

pkg/subscriptions: use securejoin for the container path #3857