GHSA-q399-23r3-hfx4: OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind

For host=node runs, approvals validated command context but did not pin executable identity for non-path-like argv[0] tokens (for example tr). If PATH resolution changed after approval, execution could run a different binary.