song: fixed non double-quoted variables (thanks shellcheck!)
install: shellcheck
install: added TODO for v2.0