fix(install-scripts): harden contrib scripts and fix critical bugs

- download_and_install_bal.sh: add set -euo pipefail, fix sudo sudo typo, fix nginx path (etc/nginx/etc/nginx -> etc/nginx), add chmod 600 for env files, reduce RestartSec to 5s, fix concatenated echo line, add systemctl daemon-reload
- download_and_install_bitcoincore.sh: add set -euo pipefail, fix source lib.sh path to use script directory
- install_tor.sh: add set -euo pipefail, detect architecture dynamically (dpkg --print-architecture), detect distro dynamically (lsb_release -cs), bind ControlPort to 127.0.0.1:9051, add DisableDebuggerAttachment

contrib/install_tor.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+set -euo pipefail
+
+apt-get update
+apt-get install -y \
+  gpg \
+  wget \
+  lsb-release
+
+ARCH=$(dpkg --print-architecture)
+DISTRO=$(lsb_release -cs)
+
+cat <<EOF > /etc/apt/sources.list.d/tor.list
+deb     [arch=$ARCH signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $DISTRO main
+deb-src [arch=$ARCH signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $DISTRO main
+EOF
+wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
+apt-get update
+apt install -y tor deb.torproject.org-keyring
+cp /etc/tor/torrc /etc/tor/torrc.bak
+sed -i '/^ControlPort/d; /^CookieAuthentication/d; /^CookieAuthFileGroupReadable/d' /etc/tor/torrc
+
+ cat << EOF >> /etc/tor/torrc
+
+# Added by script ($(date))
+ ControlPort 127.0.0.1:9051
+ CookieAuthentication 1
+ CookieAuthFileGroupReadable 1
+ DisableDebuggerAttachment 1
+EOF
+systemctl restart tor