[RFC] coverity/74718: RI: os_call_shell: handle null `cmd`

- remove invalid `FUNC_ATTR_NONNULL_ARG(1)`
- receive `(char *)` internally
- modify identifier names for consistency
- edit comments for concision and consistency
Can it be NULL? Or was coverity just warning for kicks?