- config/scripts/bw-load-ssh.sh: add ssh-agent retry loop (graphical
session may not be ready when systemd fires); use process substitution
instead of pipe to avoid subshell + set -e issues with LOADED counter
- stages/05-git.sh: remove interactive SSH key generation prompt (keys
come from Bitwarden); pre-accept GitHub host key via ssh-keyscan
to avoid first-connect prompt during git clone
- stages/04-shell.sh: add sudo chsh fallback (chsh may fail in
non-interactive provisioning without PAM auth)