chore(deps): update ghcr.io/devcontainers/features/powershell docker tag to v2.0.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/devcontainers/features/powershell	feature	patch	2.0.2 → 2.0.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

LGTM, straightforward automated dependency bump.

What was reviewed: the single-line diff in .devcontainer/devcontainer.json bumping the ghcr.io/devcontainers/features/powershell feature tag from 2.0.2 to 2.0.3. No other config, source, or documentation changes are present. This is dev-environment tooling only and does not affect application code or CI/runtime behavior.

Extended reasoning...

Overview

The PR (a Renovate bot dependency update) touches exactly one file, .devcontainer/devcontainer.json, changing the pinned Docker tag for the ghcr.io/devcontainers/features/powershell devcontainer feature from 2.0.2 to 2.0.3. No application source, tests, build scripts, or documentation are modified.

Security risks

None of note. This only affects the version of a devcontainer feature used to provision PowerShell inside a development container image — it does not affect production code, dependencies shipped to users, authentication, or data handling. The devcontainer image is not part of the application's runtime attack surface; at most it affects contributors' local/Codespaces dev environments. A patch-version bump of an official Microsoft-maintained devcontainer feature carries negligible risk.

Level of scrutiny

This warrants minimal scrutiny — it is a mechanical, single-line version bump generated by Renovate, a trusted and widely used dependency-update bot, with no ambiguity in intent or change surface. No CODEOWNERS restrictions apply to .devcontainer/, no prior review comments are outstanding (this is the first review pass), and the bug-hunting system reported zero findings.

Other factors

The change is self-contained and trivially reversible if the new patch version somehow proves problematic in dev environments. There is no test coverage concern since devcontainer configuration isn't exercised by the project's automated tests. This falls squarely within the "simple, mechanical, obvious version bump" category described in the approval guidelines.