fix(deploy): remove private source checkout from customer installer

test/static-check.sh

@@ -0,0 +1,23 @@
+#!/bin/sh
+set -eu
+
+root=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
+cd "$root"
+
+sh -n install.sh
+sh -n s-migrate.sh
+
+if rg -n 'git[[:space:]]+clone|OverCooked-S\.git|Overcooked-E\.git|Authorization:[[:space:]]*Bearer' . --glob '!.git/**'; then
+  echo 'forbidden source checkout or authorization header found' >&2
+  exit 1
+fi
+
+test -f compose/s.yml
+test -f compose/e.yml
+test -f config/e-server.production.yaml
+test -f s-migrations.tar.gz
+test "$(find s-migrations -type f -name '*.up.sql' | wc -l)" -gt 0
+! rg -n '^([[:space:]]*)build:' compose
+! rg -n 'overcooked-auth|overcooked-auth-webui' compose install.sh
+echo 'static customer installer checks passed'
+