Encourage versioned ksh shebangs

[mcandre]

Prevent subtle portability errors, such as "ksh" scripts that invoke set -euo pipefail on Debian, which break when run on OpenBSD, where the default ksh expansion is not a ksh93 variant, but a ksh88 variant.