v2.0.1

AetherShell v2.0.1

Security patch. Argument injection into PowerShell and archivers
(CWE-78, CWE-88), found while reviewing the fixed-program Command::new
sites that 2.0.0's exec gate did not cover. Both defects bypassed that
gate: an agent denied sh and denied the nine exec builtins could still
execute arbitrary code.

- 17 Windows builtins interpolated caller-controlled values into
  single-quoted PowerShell literals. safety::ps_quote is now the single
  escaping point.
- tar/zip accepted option-like positional paths
  (--use-compress-program, -TT). safety::reject_option_like refuses
  them; -- is passed to tar as well.

See docs/security/SECURITY_AUDIT_2026-07-30.md finding 10.