fix(build): add execute bit to tools/*.sh, use bash for sysext bind mount

mios-sysext-pack.sh was invoked directly from a read-only bind mount
(/ctx/tools) without the execute bit set. Since the mount is ro,
chmod inside the container is not possible. Two fixes:

1. Containerfile: call 'bash /ctx/tools/mios-sysext-pack.sh' so the
   kernel never checks the file's execute permission.

2. git update-index --chmod=+x for all 22 non-executable tools/*.sh
   scripts so the repo state is consistent and future bind mounts or
   direct calls work without needing bash prefix.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Kabuki94

Containerfile

@@ -58,7 +58,7 @@ RUN --mount=type=bind,from=ctx,source=/ctx,target=/ctx,ro \
 RUN bootc completion bash > /etc/bash_completion.d/bootc
 RUN --mount=type=bind,from=ctx,source=/ctx/tools,target=/ctx/tools,ro \
     install -d -m 0755 /usr/lib/extensions/source && \
-    /ctx/tools/mios-sysext-pack.sh /usr/lib/extensions/source || true
+    bash /ctx/tools/mios-sysext-pack.sh /usr/lib/extensions/source || true
 RUN ostree container commit
 # bootc container lint MUST be the final instruction (ARCHITECTURAL LAW 4).
 RUN bootc container lint