Use spawn for worker processes

Replace exec usage with shell+spawn, like exec uses internally.
child_process.exec gave us free shell expansion, but at the unintended
cost of buffering the child process's stdout and stderr.

Fixes #49, which was a regression caused by 1389d37.
Regen CHANGES.md with updated script
0.4.1