Fix quoted numeric config parsing

install.sh

@@ -65,10 +65,10 @@ done
 
 umask 077
 {
-  printf "CPU_THRESHOLD='%s'\n" "$CPU_THRESHOLD"
-  printf "ALERT_SCORE='%s'\n" "$ALERT_SCORE"
-  printf "CRITICAL_SCORE='%s'\n" "$CRITICAL_SCORE"
-  printf "COOLDOWN_SECONDS='%s'\n" "$COOLDOWN_SECONDS"
+  printf "CPU_THRESHOLD=%s\n" "$CPU_THRESHOLD"
+  printf "ALERT_SCORE=%s\n" "$ALERT_SCORE"
+  printf "CRITICAL_SCORE=%s\n" "$CRITICAL_SCORE"
+  printf "COOLDOWN_SECONDS=%s\n" "$COOLDOWN_SECONDS"
   printf "ABUSECH_AUTH_KEY='%s'\n" "$ABUSECH_AUTH_KEY"
   printf "DISCORD_WEBHOOK='%s'\n" "$DISCORD_WEBHOOK"
 } > /etc/malware-watch/config
@@ -91,6 +91,7 @@ if [[ "$INSTALL_CLAMAV" == "1" ]]; then
     deb="$(mktemp /tmp/clamav.XXXXXX.deb)"
     url="${CLAMAV_URL:-https://www.clamav.net/downloads/production/clamav-${CLAMAV_VERSION}.linux.${clam_arch}.deb}"
     curl -fL --retry 3 --retry-delay 2 -o "$deb" "$url"
+    chmod 644 "$deb"
     systemctl disable --now clamav-freshclam 2>/dev/null || true
     DEBIAN_FRONTEND=noninteractive apt-get remove -y \
       clamav clamav-freshclam clamav-base libclamav9 libclamav11 2>/dev/null || true