v1.6.0

Minor release: the guard now reaches into command substitutions and host-temp file creation, closing several bypasses around mktemp and shell wrappers.

• feat: guard commands inside quoted "$(…)"/backtick substitution bodies (Q33) by @karlkfi in #82
• feat: guard host-temp writes via unguarded redirects and mktemp (Q26) by @karlkfi in #77
• feat: guard commands prefixed by shell keywords (Q28) by @karlkfi in #74
• feat: decode mktemp combined short flags (Q32) by @karlkfi in #80
• feat: honor inline TMPDIR= literal in mktemp default location (Q34) by @karlkfi in #81
• feat: resolve for VAR in <literal list> loop variables by @karlkfi in #73
• feat: friction-report flags a stale installed version (Q30) by @karlkfi in #76
• Split glued operator runs into separate tokens (Q27) by @karlkfi in #75

Full Changelog: v1.5.0...v1.6.0