- Add script -e flag so codex exit code propagates through PTY wrapper - Use subshell for git repo check to avoid changing caller's cwd (fixes broken relative --workdir paths) - Replace ((ERRORS++)) with ERRORS=$((ERRORS + 1)) to avoid set -e terminating on first verification failure - Add script binary to installer dependency check