whuppi/ci 2.0.3

• The 2.0.2 mention escape didn't actually work: GitHub decodes HTML
  entities before scanning release notes for mentions, so @immutable
  still credited the immutable org as a release contributor. Commit-list
  @word tokens are now wrapped in code spans instead — GitHub never
  mention-parses code — which also reads better, since these tokens are
  code annotations in the first place.

Commits since v2.0.2 (2)

• 9a8e3ec release: v2.0.3
• 247a90d fix: wrap commit-list @word in code spans — entity escape doesn't stop mentions (#24)