Function host_process_capability 

pub fn host_process_capability() -> CapabilityName

Returns the capability gating subprocess execution by a ProcessRunner.

Spawning /bin/sh -c <command> is an arbitrary host-exec operation, so the runner demands this capability before reaching the shell, mirroring the way sibling crates gate their host effects with an explicit cx.require(...).