Avoid windows system32 path shadowing

[alexeagle]

According to https://github.com/aspect-build/rules_js/issues/1167 wrapping the "tar" with an rctx.which will convert to an absolute path, which won't have this problem.