- Add script -e flag so codex exit code propagates through PTY wrapper
- Use subshell for git repo check to avoid changing caller's cwd
(fixes broken relative --workdir paths)
- Replace ((ERRORS++)) with ERRORS=$((ERRORS + 1)) to avoid set -e
terminating on first verification failure
- Add script binary to installer dependency check