fix(template): always prefer explicit unescape mode

Here we need to distinguish `undefined` and `false`.

core/src/resolve-module.ts

@@ -659,6 +659,11 @@ export class ModuleResolver {
       context: configContext,
       contextOpts: {
         allowPartial: false,
+        // Modules will be converted to actions later, and the actions will be properly unescaped.
+        // We avoid premature un-escaping here,
+        // because otherwise it will strip the escaped value in the module config
+        // to the normal template string in the converted action config.
+        unescape: false,
       },
       // Note: We're not implementing the YAML source mapping for modules
       source: undefined,

core/src/template-string/template-string.ts

@@ -120,6 +120,15 @@ export const resolveTemplateString = profile(function resolveTemplateString({
     return string
   }
 
+  const shouldUnescape = (ctxOpts: ContextResolveOpts) => {
+    // Explicit non-escaping takes the highest priority.
+    if (ctxOpts.unescape === false) {
+      return false
+    }
+
+    return !!ctxOpts.unescape || !contextOpts.allowPartial
+  }
+
   try {
     const parsed = parser.parse(string, {
       getKey: (key: string[], resolveOpts?: ContextResolveOpts) => {
@@ -135,7 +144,7 @@ export const resolveTemplateString = profile(function resolveTemplateString({
       missingKeyExceptionType,
       passthroughExceptionType,
       allowPartial: !!contextOpts.allowPartial,
-      unescape: !!contextOpts.unescape || !contextOpts.allowPartial,
+      unescape: shouldUnescape(contextOpts),
       escapePrefix,
       optionalSuffix: "}?",
       isPlainObject,