bento-driver: expand `~/` in the local dest_dir
bento/driver: fix three faults the first real release run exposed
ops-exec: trusted executor (E1+E2), Sando refactor, thin macOS driver