Defensive scripting with set -euo pipefail

A bare Bash script keeps going after errors and treats unset variables as empty strings. set -euo pipefail flips those defaults so problems surface early.