Quote $@ and make $file and $files local in `scmpuff init -s`

[HaleTom]

As per title.

for local file in...

Also $@ is not quoted.

Would you consider running shellcheck over the codebase? (It would have picked up the $@ quoting.)

[mroth]

This makes a lot of sense, it should be possible to integrate shellcheck into the CI fairly easily with GitHub Actions.

[mroth]

@HaleTom I started addressing this in #57, if you wouldn't mind taking a look, I have some questions and would appreciate your input.