fix(bootstrap): subshell the repo_root fallback so trailing pwd doesn't corrupt the path

Co-Authored-By: Claude Opus 4.8 <[email protected]>

bootstrap/flux/bootstrap.sh

@@ -57,7 +57,7 @@ SOPS_SECRET_NAME="${SOPS_SECRET_NAME:-sops-age}"
 FLUX_COMPONENTS_EXTRA="${FLUX_COMPONENTS_EXTRA:-image-reflector-controller,image-automation-controller}"
 
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-repo_root="$(git -C "${script_dir}" rev-parse --show-toplevel 2>/dev/null || cd "${script_dir}/../.." && pwd)"
+repo_root="$(git -C "${script_dir}" rev-parse --show-toplevel 2>/dev/null || (cd "${script_dir}/../.." && pwd))"
 
 echo "==> Flux + SOPS bootstrap (dev) — path=${FLUX_ENV_PATH}"