chore(release): bump to v0.2.0a2 — fourth PyPI alpha (#198)

Security-motivated alpha: ships to consumers the fixes merged since
0.2.0a1, notably the CodeQL security clears (#191: ReDoS +
incomplete-sanitization in format.ts, open-redirect in the login
redirect, stack-trace-exposure in the inline write path), the secure
login backend (#168), the inline formset write path (#183), the
get_app_list registry grouping, and the save-flow / delete-preview /
history backends.

350 tests pass. Tier 6 — version bump; publish handled per the
Security deploy-gate under the repo owner's standing "deploy to PyPI
regularly if secure" directive.

Co-authored-by: Martin Castro Laminrs <mcastro@laminr.ai>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: 3 people

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "django-admin-react"
-version = "0.2.0a1"
+version = "0.2.0a2"
 description = "A drop-in React single-page admin for Django, driven entirely by ModelAdmin."
 authors = ["django-admin-react contributors"]
 license = "MIT"