Make sure bw/get-keychain-password returns nil

On Linux systems `security` isn't a real command, so try and find the
command before running it. This will return nil if the command isn't available.
Conditionally enable paradox starring

When I can't fetch a GitHub token, don't enable starring in Paradox.