HH-708: fail runtime font checks correctly

Co-authored-by: multica-agent <github@multica.ai>

tests/check.sh

@@ -41,11 +41,15 @@ version="$(curl --fail --location --retry 3 --silent --show-error \
 image="fingerprint-chromium-test:$version"
 CHROME_VERSION="$version" ./scripts/build.sh fingerprint-chromium-test
 
-docker run --rm --entrypoint dpkg-query "$image" --show "${font_packages[@]}" >/dev/null
+docker run --rm --entrypoint sh "$image" -c '
+  for package do
+    test "$(dpkg-query -W -f="\${Status}" "$package" 2>/dev/null)" = "install ok installed" || exit 1
+  done
+' sh "${font_packages[@]}"
 
 docker run --rm --entrypoint sh "$image" -c '
   for font do
-    fc-match --format "%{family}\n" "$font" | grep -Fq "$font"
+    fc-match --format "%{family}\n" "$font" | grep -Fq "$font" || exit 1
   done
 ' sh Arimo Tinos Cousine Caladea Carlito \
   'Noto Sans CJK JP' 'Noto Sans CJK SC' 'Noto Sans CJK TC' \