fix: exhaustive logical audit of installer, live-iso and system configurations

installer/install.sh

@@ -338,8 +338,10 @@ execute_installation() {
 
     sed "s|@TARGET_DRIVE@|${TARGET_DRIVE}|g" "$disko_file" > "$tmp_disko"
 
-    # Provide the LUKS passphrase via stdin for disk encryption
-    echo -n "$LUKS_PASSWORD" | disko --mode disko "$tmp_disko"
+    # Provide the LUKS passphrase via a temporary file for disk encryption
+    echo -n "$LUKS_PASSWORD" > /tmp/secret.key
+    disko --mode disko "$tmp_disko"
+    rm /tmp/secret.key
     success "Disk partitioned"
 
     # 9.2 Generate hardware config
@@ -439,7 +441,7 @@ FLAKE_EOF
 { inputs, ... }:
 {
   imports = [
-    $(echo -e "$HARDWARE_MODULES")
+    $HARDWARE_MODULES
   ];
   $NOMARCHY_HW_OPTS
 }