fix: harden install-flex against injection, input validation, and supply-chain risks#12

lgarceau768 merged 5 commits intoflexflexion/opencode:flexfrom

security/ensure-install-safeflexion/opencode:security/ensure-install-safeCopy head branch name to clipboard