v0.2.3 — markdown write-out safety + filename guard; hard advisor ban

Highlights

• Markdown write-out safety for the obsidian-vault agent. Composed note bodies no longer collide with Dataview/Obsidian rendering: :: inline fields, bare <word> HTML tags, $=/```dataview fences, and ===/`---` setext separators are now handled so summaries (e.g. Done backlogs) render correctly instead of garbled.
• Filename guard. The agent strips forbidden characters (/ \ : * ? " < > | # ^ [ ]) from note names/titles before creating/renaming — no more accidental subfolders from a / in a title.
• Hard advisor ban. The agent never consults the advisor (no exceptions); it asks the user instead, cutting the biggest source of latency.
• Recording pipeline mirror. The same Dataview/rendering-safety rule is applied to both session-summary.sh summarization prompts, so auto-recorded session notes get the same protection.

Full changelog: v0.2.2...v0.2.3