Merge "build: allow shell commands in `CC` and friends" into integration