Arbitrary file write via attachment path traversal

Path traversal in aerc before 93bec0d allows remote attackers to write attachment content outside its temporary directory. commands/msgview/open.go directly joins an attachment part's untrusted filename to a temporary-directory path before creating and copying content into that file. A crafted name containing parent-directory components therefore writes or overwrites any file permitted to the aerc process.