* security: harden wallet credential temp files
* fix: reject path traversal in wallet arg, correct cleanup wording, trap parity
* test: add bats suite for the credential file handling + bats CI workflow
start.service.bats: password file validation in start.service.sh (missing,
symlink, outside-path, traversal, bad-mode rejection; validation order;
password over stdin, never in the unit; deleted after use).
password-to-file.bats: passwordToFile creates an unpredictable per-run
mode-600 file under /dev/shm, cleans up via EXIT trap and on cancel/ESC.
test-bats.yml runs 'bats -r tests' on push/PR - new .bats files are
discovered automatically. Suite verified locally: 12/12 pass.
* fix(test): guard the _functions.sh source against git describe failure
On a tagless shallow checkout (CI) the version block's git describe exits
128; under bats errexit that aborted the source before the function
definitions. '|| true' keeps the source errexit-immune. Verified locally
from a non-git CWD: 12/12 pass.
---------
Co-authored-by: autoblitzbot <autoblitzbot@users.noreply.github.com>
* security: parse joinin.conf as data instead of sourcing it as code
* fix: guard sourceConf availability in _functions.bitcoincore.sh
---------
Co-authored-by: autoblitzbot <autoblitzbot@users.noreply.github.com>
