v2.8.3

Security/maintenance release: path-containment boundary hardening in the installer, installer-guide custom-path docs corrected to match the home/temp confinement, decorative README emoji removed, and CI actions bumped to v6 (Node 24). No changes to installed agents/commands/skills. See CHANGELOG.md.