Use full path to /bin/sh in cx.pow.firewall.plist ProgramArguments.

The cx.pow.firewall.plist LaunchDaemon fails to load when "sh" is supplied as the initial ProgramArgument. Replacing with complete path, (e.g., /bin/sh).