Update site oath target improvements

Some small tweaks to make the `update_site_oauth_target.sh` script more robust.

- Prevent shell expansion in the case it's called with an argument containing a space
- Set errorexit to prevent update from being called if make exits with an error
- Use `pushd` and `popd` rather than a subshell