Lint all our shell scripts with shellcheck on CI

We have stuff in scripts directory being linted by shellcheck on every CI run, but not stuff in e.g. tests/ and contrib/. We should do so when we are done systematically cleaning up our shell scripts to make them pass shellcheck without any warnings.