fix(install-scripts): correct critical bugs in contrib scripts

- download_and_install_bitcoincore.sh:
  - Fix apt install with single-quoted string (was treating all deps as one package)
  - Add sudo to apt install commands
  - Fix tar extraction: now finds extracted dir and copies bitcoind/bitcoin-cli to /usr/local/bin
  - Fix zmqpubrawblock -> zmqpubhashblock (pusher expects hashblock topic)
  - Fix install check (0 was testing cd, not tar) with explicit extraction check
  - Handle existing user in adduser
  - Fix source lib.sh path

- download_and_install_bal.sh:
  - Use curl -sfL (fail on 404, follow redirects) for Gitea download
  - Add null/empty check after jq download URL extraction
  - Change certbot --standalone to --nginx (avoids port 80 conflict)
  - Enable nginx site symlink (was commented out)
  - Handle existing 'bal' user in adduser

- install_tor.sh:
  - Add sudo to all root-requiring commands (apt, tee, cp, sed, systemctl)
  - Backup torrc with timestamp before modifying
  - Add DisableDebuggerAttachment hardening

contrib/install_tor.sh

@@ -1,8 +1,8 @@
 #!/bin/bash
 set -euo pipefail
 
-apt-get update
-apt-get install -y \
+sudo apt-get update
+sudo apt-get install -y \
   gpg \
   wget \
   lsb-release
@@ -10,17 +10,22 @@ apt-get install -y \
 ARCH=$(dpkg --print-architecture)
 DISTRO=$(lsb_release -cs)
 
-cat <<EOF > /etc/apt/sources.list.d/tor.list
+sudo tee /etc/apt/sources.list.d/tor.list > /dev/null <<EOF
 deb     [arch=$ARCH signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $DISTRO main
 deb-src [arch=$ARCH signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $DISTRO main
 EOF
-wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
-apt-get update
-apt install -y tor deb.torproject.org-keyring
-cp /etc/tor/torrc /etc/tor/torrc.bak
-sed -i '/^ControlPort/d; /^CookieAuthentication/d; /^CookieAuthFileGroupReadable/d' /etc/tor/torrc
 
- cat << EOF >> /etc/tor/torrc
+wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | sudo tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
+sudo apt-get update
+sudo apt install -y tor deb.torproject.org-keyring
+
+# Backup existing torrc before modifying
+if [ -f /etc/tor/torrc ]; then
+    sudo cp /etc/tor/torrc /etc/tor/torrc.bak.$(date +%Y%m%d%H%M%S)
+fi
+sudo sed -i '/^ControlPort/d; /^CookieAuthentication/d; /^CookieAuthFileGroupReadable/d' /etc/tor/torrc
+
+sudo tee -a /etc/tor/torrc > /dev/null << EOF
 
 # Added by script ($(date))
  ControlPort 127.0.0.1:9051
@@ -28,4 +33,4 @@ sed -i '/^ControlPort/d; /^CookieAuthentication/d; /^CookieAuthFileGroupReadable
  CookieAuthFileGroupReadable 1
  DisableDebuggerAttachment 1
 EOF
-systemctl restart tor
+sudo systemctl restart tor