- Moved the flake8 section from setup.cfg to tox.ini (more appropriate).

- Updated pre-commit hooks, added shellcheck.
- Corrected issues in test.sh found by shellcheck.
- Added bandit and pre-commit to the usual (local) Tox run.