Local privilege escalation via predictable funced tempfile

Race condition in fish funced 1.23.0 through 2.1.0 allows local users to gain another user's privileges via a predictable temporary file. funced creates an editor file with a reasonably predictable name and then directly sources its contents without protecting the creation-and-use sequence from replacement. Exploitation requires local access and winning the file race while a target user runs funced; injected shell code then executes with that target's privileges, including root.