force `subprocess.run` to check return code is 0

In general, this should help to capture unintentional errors.

Where the change has created failures, they have been fixed. (Mostly because the git repository that was looked for was missing.)