[codex] Avoid shell for Node executable spawns (#2952)

Co-authored-by: Julius Marminge <julius@mac.lan>