v0.20.4-rc1

Changelog

• 8086e4d docs: mark Postgres DB access control Phase 1+2 as implemented (spec v0.9) (#423)
• b4da674 fix(#417): FUSE honors per-path soft_delete policy decision (#422)
• 32aec30 fix(#418): classify O_CREAT without O_EXCL as "write" not "create" (#421)
• 03b76fd fix(#416): bind session to already-traced shell in attach_mode=pid + shim_install=auto (#420)
• a6de0bd fix(#415): route unixwrap diagnostics off the wrapped command's stderr (#419)
• 2886731 docs: add Windows WSL2 setup guide for running Claude Code under agentsh
• 9bdd6b9 fix(#411): graceful degradation for unenforceable per-command cgroup limits (#414)
• 97277d6 docs(examples): add CVE mitigation demos (CIFSwitch, Fragnesia, DirtyDecrypt) (#413)
• eb0b094 fix(seccomp): scope unix-socket socket(2) notify to AF_UNIX so errno socket_rules survive (#412)