Improve safety and CLI fidelity for everyday use

Drop default --noconfirm (opt-in via --noconfirm), fix --noremovemake,
forward pacman argv intact for -R/-D/-F/-T/-U, deepen PKGBUILD review,
show an install plan before building, and add shellcheck CI plus unit tests.

Co-authored-by: Frank Vitrano <WHC2006@users.noreply.github.com>

lib/deps.sh

@@ -23,8 +23,8 @@ srcinfo_dump() {
 
 # Returns 0 if dep is satisfied (installed or provided by installed pkg)
 dep_satisfied() {
-	local dep name
-	name=$(dep_name "$1")
+	local _name
+	_name=$(dep_name "$1")
 	# pacman -T returns unsatisfied deps; empty means all ok
 	local out
 	out=$(pacman -T "$1" 2>/dev/null) || true
@@ -55,11 +55,6 @@ resolve_one_dep() {
 		echo "aur:$name"
 		return 0
 	fi
-	# Try provides via pacman -Ssq exact? fallback AUR search by name
-	if [[ ${MIAUR_MODE:-} != repo ]] && aur_exists "$name"; then
-		echo "aur:$name"
-		return 0
-	fi
 	echo "missing:$name"
 }
 
@@ -152,5 +147,7 @@ install_repo_deps() {
 	done
 	[[ ${#list[@]} -eq 0 ]] && return 0
 	msg "Installing repository dependencies: ${list[*]}"
-	as_root ${MIAUR_PACMAN} -S --needed --asdeps --noconfirm "${list[@]}"
+	local -a conf=()
+	mapfile -t conf < <(pac_noconfirm_args)
+	as_root ${MIAUR_PACMAN} -S --needed --asdeps "${conf[@]}" "${list[@]}"
 }