[Bug]: `Access is denied` error on unpacking vite installation on Windows

### What happened?

When trying to run a vite build script on Windows, the build process fails with an error that seems to indicate a "Access is denied" error. The same problem does not appear on Linux, where the build completes successfully.
More precisely, the error is

```
PS C:\Users\user\Documents\rules_js_repro> bazel build //frontend
INFO: Repo aspect_rules_js++npm+npm__vite__7.3.3_646383693 defined by rule npm_import_rule in @@aspect_rules_js+//npm/private:npm_import.bzl
INFO: repository @@aspect_rules_js++npm+npm__vite__7.3.3_646383693' used the following cache hits instead of downloading the corresponding file.
* Hash 'ff85c7d78ed48bb3864e38371db7567b96ab9d94126dfb91cddafd11ced3422e48ed1fa2af446573d188bc3e2fd1766eac42ea034df92955c95e947ad718624c' for https://registry.npmjs.org/vite/-/vite-7.3.3.tgz
If the definition of 'repository @@aspect_rules_js++npm+npm__vite__7.3.3_646383693' was updated, verify that the hashes were also updated.
ERROR: C:/users/user/_bazel_user/yvbvf4ba/external/aspect_rules_js+/npm/private/npm_import.bzl:576:17: An error occurred during the fetch of repository 'aspect_rules_js++npm+npm__vite__7.3.3_646383693':
Traceback (most recent call last):
File "C:/users/user/_bazel_user/yvbvf4ba/external/aspect_rules_js+/npm/private/npm_import.bzl", line 599, column 38, in _npm_import_rule_impl
_download_and_extract_archive(rctx, package_json_only = False)
File "C:/users/user/_bazel_user/yvbvf4ba/external/aspect_rules_js+/npm/private/npm_import.bzl", line 576, column 17, in _download_and_extract_archive
fail(msg)
Error in fail: Failed to extract package tarball. '[Label("@@tar.bzl++toolchains+bsd_tar_toolchains_windows_amd64//:tar.exe"), "-xf", "package.tgz", "--strip-components", "1", "-C", "package", "--no-same-owner", "--no-same-permissions", "--exclude", "Makefile", "--exclude", "Gulpfile.js", "--exclude", "Gruntfile.js", "--exclude", "appveyor.yml", "--exclude", "circle.yml", "--exclude", "codeship-services.yml", "--exclude", "codeship-steps.yml", "--exclude", "wercker.yml", "--exclude", ".tern-project", "--exclude", ".gitattributes", "--exclude", ".editorconfig", "--exclude", ".*ignore", "--exclude", ".eslintrc", "--exclude", ".jshintrc", "--exclude", ".flowconfig", "--exclude", ".documentup.json", "--exclude", ".yarn-metadata.json", "--exclude", ".travis.yml", "--exclude", "*.md"]' exited with 256:
STDOUT:

STDERR:
java.io.IOException: ERROR: src/main/native/windows/process.cc(189): CreateProcessW("C:\users\user\_bazel_user\yvbvf4ba\external\tar.bzl++toolchains+bsd_tar_toolchains_windows_amd64\tar.exe" -xf package.tgz --strip-components 1 -C package --no-same-owner --no-same-permissions --exclude Makefile --exclude Gulpfile.js --exclude Gruntfile.js --exclude appveyor.yml --exclude circle.yml --exclude codeship-services.yml --exclude codeship-steps.yml --exclude wercker.yml --exclude .tern-project --exclude .gitattributes --exclude .editorconfig --exclude .*ignore --exclude .(...)): Access is denied.
(error: 5)
WARNING: Target pattern parsing failed.
ERROR: Skipping '//frontend': no such package '@@aspect_rules_js++npm+npm__vite__7.3.3_646383693//': Failed to extract package tarball. '[Label("@@tar.bzl++toolchains+bsd_tar_toolchains_windows_amd64//:tar.exe"), "-xf", "package.tgz", "--strip-components", "1", "-C", "package", "--no-same-owner", "--no-same-permissions", "--exclude", "Makefile", "--exclude", "Gulpfile.js", "--exclude", "Gruntfile.js", "--exclude", "appveyor.yml", "--exclude", "circle.yml", "--exclude", "codeship-services.yml", "--exclude", "codeship-steps.yml", "--exclude", "wercker.yml", "--exclude", ".tern-project", "--exclude", ".gitattributes", "--exclude", ".editorconfig", "--exclude", ".*ignore", "--exclude", ".eslintrc", "--exclude", ".jshintrc", "--exclude", ".flowconfig", "--exclude", ".documentup.json", "--exclude", ".yarn-metadata.json", "--exclude", ".travis.yml", "--exclude", "*.md"]' exited with 256:
STDOUT:

STDERR:
java.io.IOException: ERROR: src/main/native/windows/process.cc(189): CreateProcessW("C:\users\user\_bazel_user\yvbvf4ba\external\tar.bzl++toolchains+bsd_tar_toolchains_windows_amd64\tar.exe" -xf package.tgz --strip-components 1 -C package --no-same-owner --no-same-permissions --exclude Makefile --exclude Gulpfile.js --exclude Gruntfile.js --exclude appveyor.yml --exclude circle.yml --exclude codeship-services.yml --exclude codeship-steps.yml --exclude wercker.yml --exclude .tern-project --exclude .gitattributes --exclude .editorconfig --exclude .*ignore --exclude .(...)): Access is denied.
(error: 5)
ERROR: no such package '@@aspect_rules_js++npm+npm__vite__7.3.3_646383693//': Failed to extract package tarball. '[Label("@@tar.bzl++toolchains+bsd_tar_toolchains_windows_amd64//:tar.exe"), "-xf", "package.tgz", "--strip-components", "1", "-C", "package", "--no-same-owner", "--no-same-permissions", "--exclude", "Makefile", "--exclude", "Gulpfile.js", "--exclude", "Gruntfile.js", "--exclude", "appveyor.yml", "--exclude", "circle.yml", "--exclude", "codeship-services.yml", "--exclude", "codeship-steps.yml", "--exclude", "wercker.yml", "--exclude", ".tern-project", "--exclude", ".gitattributes", "--exclude", ".editorconfig", "--exclude", ".*ignore", "--exclude", ".eslintrc", "--exclude", ".jshintrc", "--exclude", ".flowconfig", "--exclude", ".documentup.json", "--exclude", ".yarn-metadata.json", "--exclude", ".travis.yml", "--exclude", "*.md"]' exited with 256:
STDOUT:

STDERR:
java.io.IOException: ERROR: src/main/native/windows/process.cc(189): CreateProcessW("C:\users\user\_bazel_user\yvbvf4ba\external\tar.bzl++toolchains+bsd_tar_toolchains_windows_amd64\tar.exe" -xf package.tgz --strip-components 1 -C package --no-same-owner --no-same-permissions --exclude Makefile --exclude Gulpfile.js --exclude Gruntfile.js --exclude appveyor.yml --exclude circle.yml --exclude codeship-services.yml --exclude codeship-steps.yml --exclude wercker.yml --exclude .tern-project --exclude .gitattributes --exclude .editorconfig --exclude .*ignore --exclude .(...)): Access is denied.
(error: 5)
INFO: Elapsed time: 2.053s
INFO: 0 processes.
ERROR: Build did NOT complete successfully
```

May be somewhat related to #2026.

### Version

Development (host) and target OS/architectures:

Windows 10

Output of `bazel --version`:

Tested with both `8.7.0` and `9.1.0`

Version of the Aspect rules, or other relevant rules from your
`WORKSPACE` or `MODULE.bazel` file:

```
bazel_dep(name = "rules_nodejs", version = "6.7.4")
bazel_dep(name = "aspect_rules_js", version = "3.1.2")

node = use_extension("@rules_nodejs//nodejs:extensions.bzl", "node")
node.toolchain(node_version = "20.19.2")
```

Language(s) and/or frameworks involved:

Vite

### How to reproduce

```shell
I have created a repo that reproduces the issue.
You can find it [here](https://github.com/TendTo/rules_js_repro)
```

### Any other information?

_No response_

Reproduce the failure with `bazel build //frontend` using the linked rules_js_repro repository, then inspect `npm/private/npm_import.bzl` around `_download_and_extract_archive` and the Windows `tar.exe` invocation shown in the trace. Done means the Vite package extracts successfully on Windows 10 and the build completes without the CreateProcessW access-denied error.

Written by the indexing model from the issue text.