aish v0.3.13

Removed

• System-level security policy: /etc/aish/security_policy.yaml is no longer read; the user-level ~/.config/aish/security_policy.yaml (auto-seeded from the shipped template when missing) is the sole source of security settings. Administrators who relied on a system-wide policy must migrate its content to each user's policy file. On upgrade, if the user-level file is missing and a leftover /etc/aish/security_policy.yaml exists, its content is copied to the user-level path instead of being silently discarded. The uninstaller still removes leftover /etc/aish from older installers.

Fixed

• After an upgrade, the Keep-a-Changelog startup summary is no longer consumed by a flash start (version probe, immediate quit, Ctrl-D, or a daemon-attach race). The last-changelog-version marker is only advanced after the user actually uses the shell, so the next real session still shows the notes.