install: fix eval injection, update usage comments

- Replace eval echo ~user with getent passwd for home dir lookup
- Recommend clone+run as primary method over curl|bash

Author: benvinegar

install.sh

@@ -1,12 +1,12 @@
 #!/bin/bash
 # Hornet Interactive Installer
 #
-# One-command setup:
-#   curl -sSf https://raw.githubusercontent.com/modem-dev/hornet/main/install.sh | sudo bash
-#
-# Or from a clone:
+# From a clone (recommended):
 #   sudo ./install.sh
 #
+# Or one-liner:
+#   git clone https://github.com/modem-dev/hornet.git ~/hornet && sudo ~/hornet/install.sh
+#
 # What this does:
 #   1. Detects distro, installs system prerequisites
 #   2. Clones the repo (or uses existing clone)
@@ -109,7 +109,7 @@ if ! id "$ADMIN_USER" &>/dev/null; then
   die "User '$ADMIN_USER' does not exist."
 fi
 
-ADMIN_HOME=$(eval echo "~$ADMIN_USER")
+ADMIN_HOME=$(getent passwd "$ADMIN_USER" | cut -d: -f6)
 info "Admin user: ${BOLD}$ADMIN_USER${RESET} ($ADMIN_HOME)"
 
 # ── Install prerequisites ────────────────────────────────────────────────────