coverity/74718: os_call_shell: handle null `cmd`

- remove invalid FUNC_ATTR_NONNULL_ARG(1)
- receive (char *) internally
- modify identifier names for consistency
- edit comments for concision and consistency