syscfg 20260628

NEWS:
* Fixed critical use-without-assert `eval` vulnerability in ed_exec() and
  precisely clarified the type of format accepted.

* Documented how syscfg is not yet secure. (5c2fabc)

* Synced shell-glossary to release 20260625. This removes the `---` format
  option of info(); also applies to err(). In syscfg, this change also applies
  to __info() and __err() API functions.
  Breaking (backward-incompatible) change.

* Introduced new __say() API function. It simply prints a string as passed,
  naturally avoiding $IFS quirks and/or client string prefix of __info().
  Intended for programmatical strings/clients.

- Filtered log of core changes:
a6823a0 syscfg: Add __say() API func
d422660 .gitmodules: shell-glossary -> `20260625`
a6ceb0a syscfg: Fix insecure `eval` in ed_exec()

- Complete log between 20260620 and 20260628:
41a5fe2 syscfg 20260628
a6823a0 syscfg: Add __say() API func
d422660 .gitmodules: shell-glossary -> `20260625`
7a05ae1 doc: Clarify $NO_COLOR
930e55c NEWS: 20260622
5c2fabc doc: Note syscfg is not yet secure
a6ceb0a syscfg: Fix insecure `eval` in ed_exec()