ci: eliminate use of `cmd` in workflows

[lidavidm]

What feature or improvement would you like to see?

Zizmor can't analyze cmd.exe as effectively.