Add RESTRICTED_PATH to bazel invocations The bazel command should not be using PATH of the user's environment, but instead the same RESTRICTED_PATH used in the action environment. In action execution, this made no difference, but may make a difference for the workspace status script. It also makes a difference for bazelisk integration. Bug: 283971340 Test: Treehugger Change-Id: I78798e120acd45df7cfe75f7775e9e0a2b9d7fb3