builtins: Don’t crash for negative return values

Another from the “why are we asserting instead of doing something sensible” department.

The alternative is to make exit() and return() compute their own exit code, but tbh I don’t want any other builtin to hit this either?

Fixes #9659