child_process: disallow args in execFile/spawn when shell option is true

[DanielVenable]

This will make it throw an error when args are passed to execFile or
spawn when the shell option is true. The reason for this is that when it
accepts args, it gives the false impression that the args are escaped while
really they are just concatenated. This makes it easy to introduce bugs
and security vulnerabilities.

This will break any code that relies on passing args to execFile or
spawn with { shell: true }.

Fixes: #57143

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 90.32%. Comparing base (b7beb33) to head (b265434).
Report is 6 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #57199      +/-   ##
==========================================
+ Coverage   90.30%   90.32%   +0.01%     
==========================================
  Files         630      630              
  Lines      184513   184516       +3     
  Branches    36072    36075       +3     
==========================================
+ Hits       166629   166663      +34     
+ Misses      10967    10963       -4     
+ Partials     6917     6890      -27     

Files with missing lines	Coverage Δ
lib/child_process.js	97.73% <100.00%> (+<0.01%)	⬆️

... and 35 files with indirect coverage changes