Skip credential refresh for WindowsApps launch failures (#29637)

## Summary

- keep the child error 1312 credential retry for normal executables
- return WindowsApps/AppX launch errors directly instead of rotating
sandbox credentials and retrying the same command

## Why

Windows AppX activation can return `ERROR_NO_SUCH_LOGON_SESSION` (1312)
even when the sandbox token is healthy. For executables under
`WindowsApps`, refreshing the sandbox account password cannot fix that
activation failure; it only triggers elevated setup before the same
command fails again.

This is a focused follow-up to #29624.

codex-rs/windows-sandbox-rs/src/unified_exec/backends/elevated.rs

@@ -63,6 +63,7 @@ fn spawn_runner_transport_with_retry<T>(
 ) -> Result<T> {
     retry_runner_spawn_once(
         sandbox_creds,
+        &request.spawn_request.command,
         |sandbox_creds| {
             spawn(
                 &request.codex_home,