Quote `$FILES` zero-width test
Use verified path-accessible command

When removing the `which` calls, the resulting variable wasn't updated.
Pop stash on pre-commit script exit