fix: comprehensive script audit - bug fixes and optimizations

- ct/invidious.sh: fix copy-paste bug (OxiCloud code in update block)
- install/invidious-install.sh: fix sed redirect, service filename mismatch
- ct/forgejo-runner.sh: fix binary download path, bump Debian to 13
- ct/authentik.sh: add -f flag to curl (fail on HTTP errors)
- ct/localagi.sh: add -f flag to curl, add installation check guard
- ct/ente.sh: fix broken install check (/var -> /opt/ente), apt-get -> apt
- ct/garmin-grafana.sh: add explicit tarball mode to fetch_and_deploy
- install/garmin-grafana-install.sh: fix local outside function, add tarball mode
- install/ente-install.sh: uncomment cleanup_lxc
- install/github-runner-install.sh: add missing , fix msg_info text
- ct/step-ca.sh: remove duplicate success message
- ct/devuan.sh, ct/ubuntu.sh: apt-get -> apt, remove duplicate msg_ok

ct/forgejo-runner.sh

@@ -12,7 +12,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
+var_version="${var_version:-13}"
 
 var_unprivileged="${var_unprivileged:-1}"
 var_nesting="${var_nesting:-1}"
@@ -39,7 +39,7 @@ function update_script() {
 
   RELEASE=$(curl -fsSL https://data.forgejo.org/api/v1/repos/forgejo/runner/releases/latest | grep -oP '"tag_name":\s*"\K[^"]+' | sed 's/^v//')
   msg_info "Updating Forgejo Runner to v${RELEASE}"
-  curl -fsSL "https://code.forgejo.org/forgejo/runner/releases/download/v${RELEASE}/forgejo-runner-linux-amd64" -o forgejo-runner
+  curl -fsSL "https://code.forgejo.org/forgejo/runner/releases/download/v${RELEASE}/forgejo-runner-linux-amd64" -o /usr/local/bin/forgejo-runner
   chmod +x /usr/local/bin/forgejo-runner
   msg_ok "Updated Forgejo Runner"