test(cli): route every env-less spawner through childEnv(), and make the gate refuse an undeclared child env

test(cli): route every env-less spawner through childEnv(), and make the gate refuse an undeclared child env #25913