v2.0.4

AetherShell v2.0.4

Security patch. Six more PowerShell injection sites (CWE-78), found by
a lint rather than by reading.

tests/no_raw_shell_interpolation.rs scans for the shape of the bug. It
failed on first run, flagging six sites that the 2.0.1 and 2.0.2 manual
passes had both missed: Resolve-DnsName (x2), SendKeys::SendWait (x3),
MessageBox::Show (x1).

The finding is not the six sites — it is that they were still there
after the class had supposedly been closed twice.

See docs/security/SECURITY_AUDIT_2026-07-30.md finding 10d.