test,win: add NODE_OPTIONS --no-maglev allowlist and CET regression test

Verify that --no-maglev and --maglev are accepted in NODE_OPTIONS
(regression guard for the kAllowedInEnvvar addition in the previous
commit). Add a Windows-specific test that confirms the process starts
cleanly when those flags are passed via the environment variable.
The actual CET hardware auto-disable path requires OS-level shadow stack
enforcement and is covered by manual testing on Windows 11 Insider
builds; this test covers the observable envvar interface.

Author: ngtrnhao

test/parallel/test-cli-node-options.js

@@ -77,6 +77,8 @@ expect('--abort_on-uncaught_exception', 'B\n');
 expect('--disallow-code-generation-from-strings', 'B\n');
 expect('--expose-gc', 'B\n');
 expect('--jitless', 'B\n');
+expect('--no-maglev', 'B\n');
+expect('--maglev', 'B\n');
 expect('--max-old-space-size=0', 'B\n');
 expect('--max-semi-space-size=0', 'B\n');
 expect('--stack-trace-limit=100',

test/parallel/test-win-cet-maglev-disable.js

@@ -0,0 +1,43 @@
+'use strict';
+// Verify that the --no-maglev V8 flag is accepted via NODE_OPTIONS on Windows,
+// and that the CET shadow stack auto-detection path compiles correctly.
+//
+// The actual CET auto-disable behavior (in InitializeNodeWithArgsInternal) can
+// only be exercised on hardware that has CET shadow stacks enabled by the OS,
+// so that path is covered by manual testing on Windows 11 Insider builds.
+// This test covers the observable surface: --no-maglev is accepted via
+// NODE_OPTIONS without error, and the process exits cleanly.
+
+const common = require('../common');
+
+if (!common.isWindows)
+  common.skip('Windows-specific CET / Maglev regression test');
+
+if (process.config.variables.node_without_node_options)
+  common.skip('missing NODE_OPTIONS support');
+
+const assert = require('assert');
+const { execFile } = require('child_process');
+
+const cases = [
+  // --no-maglev must be accepted in NODE_OPTIONS (regression: previously it
+  // was a pure V8 passthrough not whitelisted for envvar use).
+  { env: 'NODE_OPTIONS=--no-maglev', desc: '--no-maglev via NODE_OPTIONS' },
+  // --maglev must also be accepted so users can explicitly opt back in.
+  { env: 'NODE_OPTIONS=--maglev',    desc: '--maglev via NODE_OPTIONS' },
+];
+
+for (const { env: envStr, desc } of cases) {
+  const [key, value] = envStr.split('=');
+  const env = { ...process.env, [key]: value };
+
+  execFile(
+    process.execPath,
+    ['-e', 'process.exitCode = 0;'],
+    { env },
+    common.mustCall((err, stdout, stderr) => {
+      assert.ifError(err);
+      assert.strictEqual(stderr, '', `${desc}: unexpected stderr: ${stderr}`);
+    })
+  );
+}