merlin.install: don't rely on gnuism of find(1)