Add AWS CDK NodejsFunction fix references

[cookesan]

Adds the exact upstream merge commits and the v2.246.0 release reference for GHSA-999r-qq7v-r334.

Evidence checked:

• fix(lambda-nodejs): use direct spawn for local bundling aws/aws-cdk#37292 merged as 9bf4263ea631cae7c0cfff8872ec4fb3a3164cc1; v2.245.0 contains that merge commit and lists the local bundling spawn fix.
• fix(lambda-nodejs): use powershell for spawn steps on Windows aws/aws-cdk#37412 merged as a92105c64c4ff30bd85f506ef4f7dec39a923871; v2.246.0 contains that merge commit and lists the Windows spawn fix.
• npm tarballs for aws-cdk-lib 2.244.0, 2.245.0, and 2.246.0 match registry shasums; the package code moves local bundling away from the old shell-command path to spawn steps, then adds Windows PowerShell spawn handling.