[RFC] coverity/74718: RI: os_call_shell: handle null `cmd`

- remove invalid `FUNC_ATTR_NONNULL_ARG(1)`
- receive `(char *)` internally
- modify identifier names for consistency
- edit comments for concision and consistency
Why this new behaviour is needed? Previously, cmd being null was not handled here, was it?