Release 2.0.20 (2026-05-19)

Chores

• bump version to 2.0.20

Features

• add exact-match allowlist to vrg-git for specific denied-subcommand overrides