v0.3.0-rc2

Changelog

• 1d7896c feat: keep the server's own files out of a script's reach
• 416af14 feat: report sandbox paths missing on the node in the scan log
• 4fd591d feat: warn at boot when scripts cannot be confined
• 236c7e4 feat: writable places of a confined script are not executable
• 8a6db72 fix: open external links without blocking the desktop window
• ad11200 fix: print the error when gosint-desktop exits
• e2412d0 fix: release check never holds its lock across the request