v2.0.3

PROVE: the protocol now states that the Castra check runs as argv without a shell, and shows how to wrap checks that use &&, pipes or ! (sh -c '...'). A live session had passed a shell string as one argument; the check exited 127 and the edited file stayed unverified.