Bash through Ops domains: strict-mode scripting, trap cleanup, key-ceremony automation, and the idempotent guard.