Quote all variables and use shellcheck in CI

Most variables in the provided bash scripts are not quoted.

FS#66933 reflects this problem. Going untreated this will lead to more unpleasant surprises in the future, which is why all variables should be quoted and shellcheck be run against all the scripts in CI in an effort to find offending changes early.