devscripts: general hardening of shell scripts

- full paths to utils
- `$()` construct
- quoting
- prefer double square brackets