fix(packaging): defer PKG_ROOT expansion in trap until cleanup time
Single-quoted trap defers expansion to when the trap fires, and quoting
$PKG_ROOT inside protects against any future mktemp output containing
spaces. Pure defensive shell hygiene; current /tmp paths don't trigger.
