It appears that the ssh-agent forwarding is setup after attempting to clone the git repository.
Can you reorder things so that the keys required by git are available before you call install.sh?
Related as I was debugging this: Anyspheres Dev Container Extension: Use the Name Property of DevContainers + Allow to Switch Containers - #46 by jroesch