always set 'use_default_shell_env' in ctx.actions.run

Aspect uses shell wrappers that invoke tools like `dirname` and `uname`.
When the default shell env is not inherited, this prevents tools from
being found on systems without a working fallback $PATH (like NixOS).

See also: NixOS/nixpkgs#289505

ts/private/ts_project.bzl

@@ -260,6 +260,7 @@ This is an error because Bazel does not run actions unless their outputs are nee
             env = {
                 "BAZEL_BINDIR": ctx.bin_dir.path,
             },
+            use_default_shell_env = True,
         )
 
     transitive_sources = js_lib_helpers.gather_transitive_sources(output_sources, ctx.attr.srcs + [ctx.attr.tsconfig] + ctx.attr.deps)

ts/private/ts_proto_library.bzl

@@ -60,6 +60,7 @@ def _protoc_action(ctx, proto_info, outputs, options = {
             [ctx.executable.protoc_gen_connect_query] if ctx.attr.gen_connect_query else []
         ),
         env = {"BAZEL_BINDIR": ctx.bin_dir.path},
+        use_default_shell_env = True,
     )
 
 def _declare_outs(ctx, info, ext):

ts/private/ts_validate_options.bzl

@@ -78,6 +78,7 @@ def _validate_action(ctx, tsconfig_inputs):
         env = {
             "BAZEL_BINDIR": ctx.bin_dir.path,
         },
+        use_default_shell_env = True,
     )
 
     return [marker]