Avoid shell args for global package manager lookup

[Pradeep Ramola (pradeep-ramola)]

Addresses microsoft/vscode-eslint#2237

The Windows global npm/yarn path resolver used spawnSync(..., args, { shell: true }) for .cmd package manager commands. Node 24 emits DEP0190 for that combination.

This updates the shared resolver to invoke cmd.exe /d /s /c <package-manager>.cmd ... directly on Windows, so Node no longer receives a shell: true child-process call with an args array. Non-Windows behavior remains unchanged.

Validated on Windows with Node 24:

npm run compile:server
npm run lint --prefix server
node --trace-deprecation -e "const files=require('./server/lib/node/files'); const result=files.resolveGlobalNodePath((message)=>console.log(message)); console.log('resolved=' + result);"

The resolver still returned the npm global node_modules path and no DEP0190 trace was emitted.