mkpasswd: use unsigned char, bitwise ops

Addition happens to work with signed chars, but is not accurate.
mkpasswd: declare variables at once
askpin: declare trace() before use

Otherwise the getopt section calls `perf`.
askpin: rename trace() to the usual debug()
askpin: use standard $DEBUG
askpin: import debug() from lib.bash
kc: shorter output for anonymous tickets
kl: import Nullroute::Lib optionally
kl: avoid duplicate realm in anon ccaches
getpaste: sync boilerplate
mklinux: use /usr/lib/os-release
dist/collect: use /usr/lib/os-release
dist/collect: show both os-release files