v2.0.3

AetherShell v2.0.3

Security patch. sqlite3 dot-commands and two tmux exec paths were
ungated (CWE-77).

Found by enumerating rather than reasoning: the 647 literal
Command::new sites reduce to 216 distinct programs, each checked for a
way to make it run a command.

- sqlite3 <db> ".system <cmd>" executes; db.sqlite_query/exec/export_csv
  were arbitrary execution wearing a database API.
- tmux new-session ... <cmd> runs the command.
- tmux send-keys ... Enter types one into a live shell.

See docs/security/SECURITY_AUDIT_2026-07-30.md finding 11.