Lint all our shell scripts with shellcheck on CI

We have stuff in scripts directory being linted by shellcheck on every CI run, but not stuff in e.g. tests/ and contrib/. We should do so when we are done systematically cleaning up our shell scripts to make them pass shellcheck without any warnings.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information