ci: escape wildcards to avoid shell expansion

Some quotings were incorrectly dropped adding Windows support.  This
resulted in globing of the input list instead of it being handled inside
teenytest.  It seems `"` is preferred over `'` for Windows and was used
in other scripts

Signed-off-by: Chris. Webster <chris@webstech.net>

A full bash environment is only available with wsl2 so do not rely on
it.  Run spawned processes in cmd shell on Windows.  `package.json` used
for these tests now specify node should be run instead of relying on
shebang support.

Signed-off-by: Chris. Webster <chris@webstech.net>

ci/dev: Windows support

Remove some shebang assumptions.

Added test:safe:esm which runs some tests for Windows in the cmd shell.
test:safe:bats tests run under bash so they do not test WIndows
pathname  issues.

Signed-off-by: Chris. Webster <chris@webstech.net>

Running on Windows needs the command to be specified in `package.json`.

Signed-off-by: Chris. Webster <chris@webstech.net>

git does not always create links so using relative paths expands on
WIndows compatability.

Signed-off-by: Chris. Webster <chris@webstech.net>

git may not create links for the test file.  Other test files are not
links so maybe this does not need to be one either.

Signed-off-by: Chris. Webster <chris@webstech.net>

WIndows has issues running bash scripts with crlf.

Signed-off-by: Chris. Webster <chris@webstech.net>

ci: use bash shell when spawning tests on windows

fix: use file URL for esm import and remove node version check

The fully qualified path needs to be a URL type to work on Windows.

Signed-off-by: Chris. Webster <chris@webstech.net>

Currently supported node versions no longer need the check for esm
import support.

Signed-off-by: Chris. Webster <chris@webstech.net>

Some spawned tests expect to be running in a UNIX environment (shebang
checking for example).  When spawning tests on Windows, the shell will now be
bash.  It is expected that maintainers will have bash available (it may
be git bash).

Signed-off-by: Chris. Webster <chris@webstech.net>

…ath-parse-1.0.7

Bump path-parse from 1.0.5 to 1.0.7 in /unit

…odash-4.17.21

Bump lodash from 4.17.15 to 4.17.21 in /unit

…arse-1.0.7

Bump path-parse from 1.0.6 to 1.0.7

…-git-info-2.8.9

Bump hosted-git-info from 2.8.8 to 2.8.9

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.5 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

…arent-5.1.2

Bump glob-parent from 5.1.1 to 5.1.2

…-4.17.21

Bump lodash from 4.17.13 to 4.17.21

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases)
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md)
- [Commits](gulpjs/glob-parent@v5.1.1...v5.1.2)

---
updated-dependencies:
- dependency-name: glob-parent
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

README spelling fixes