feat(install): expand apt packages, Docker, pipx CLIs, deploy bin/

- broaden the apt-get set: git-filter-repo, valgrind, shellcheck, gnupg,
  ca-certificates, apt-transport-https, tree, tmux, fzf, dtach, net-tools,
  openssh-server, cifs-utils, lftp, ftp, nodejs, python3-pip, pipx, php-cli,
  ffmpeg, wkhtmltopdf, poppler-utils, qpdf, webp, libavif-bin
- set up Docker's official Ubuntu repo and install engine + compose plugin
  (idempotent: skipped if docker is already present)
- install pipx CLIs PyMuPDF (pymupdf) and Markdown (markdown_py)
- deploy bin/ scripts to ~/.local/bin
- document the package set and CLI tools in README and CLAUDE.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

CLAUDE.md

@@ -21,9 +21,15 @@ vim/vimrc             vim config (pathogen, molokai, syntastic, NERDTree)
 vim/autoload/         pathogen loader (committed)
 vim/colors/           molokai colorscheme (committed)
 bash/bashrc-{linux,osx}          OS-detected bashrc
+bin/{dt,dtach-router,claude-provider}   CLI scripts deployed to ~/.local/bin
 .claude/{tasks,memory,audits}/   Claude working state
 ```
 
+`pymupdf`/`markdown_py` are NOT tracked — they are pipx entry-point shims,
+recreated by `pipx install PyMuPDF Markdown` in install.sh.
+`claude-provider` reads `$OPENROUTER_API_KEY` from the env — never hardcode it (the
+original had a live key; it was scrubbed — see decisions/blockers).
+
 ## Commands
 
 | Task  | Command                                  |