v3.0.0

AetherShell v3.0.0

BREAKING: safety::ps_quote and safety::applescript_quote return
PsLiteral / AppleScriptLiteral instead of String. Both implement
Display, so format!("… {}", ps_quote(v)) is unaffected.

ps_script! and applescript! type-check every argument through a sealed
trait, so passing caller data into a shell command is a compile error.
Converting 58 sites surfaced two live injection vectors that interpolate
unquoted — vm.create memory/disk and firewall.allow port — which the
2.0.4 lint cannot see by construction and three manual passes missed.
safety::ps_bare_number validates them.

Four defects in this class, found four different ways: reading; testing
an assertion reading got wrong; a lint; a type check.

See docs/security/SECURITY_AUDIT_2026-07-30.md finding 10f.