Release 0.3.3

[This release is the same as `0.3.2` but the version number in `configure.ac`
 was accidentally still set to `0.3.1`)

This release fixes a mostly theoretical security issue in unusual/broken
setups where `$XDG_RUNTIME_DIR` is unset.

There are some other smaller fixes, as well as an addition to the JSON
API that allows reading the inner process exit code, separately from
the `bwrap` exit code.

Thanks to all contributors!

```
Iain Lane (1):
      tests: Handle systems without merged-/usr

Jakub Wilk (2):
      Fix typos
      Print "Out of memory" on stderr, not stdout

Richard Maw (3):
      Revert "README.md: Delete cat logo picture (not DFSG compliant)"
      bwrap: add option json-status-fd to show child exit code
      bwrap: Report COMMAND exit code in json-status-fd

Simon McVittie (3):
      man page: Describe --chdir, not nonexistent --cwd
      Don't create our own temporary mount point for pivot_root
      tests: Ensure that tmpfs with oldroot/newroot doesn't appear in container

Timothy E Baldwin (1):
      Make lockdata long enough on 32-bit with 64-bit file pointers.
```

Git-EVTag-v0-SHA512: 1320cc04e853be996e6fa53fb3e472f732ac02855ab05984fa3350aed1d8760fc3b9eac0e6af06843a1f6265afe424e042c937d64606ef2eb29ec53a3539c217
-----BEGIN PGP SIGNATURE-----

iQFHBAABCgAxFiEEq5KKnPjdBikJw3u93EX9WSHBPwsFAlzJXokTHHdhbHRlcnNA
dmVyYnVtLm9yZwAKCRDcRf1ZIcE/Cwm3B/0Q/rrrMEJ18znVG/fNTfX8OUNWp0nI
yR6I50DDzd/P3t43ktgpfVGqqUk1z7AlD1R1fGcUL4bOuBymybdArcx1Oztw2yKr
uugDgjnPEJn8LB4mWkwIRdwvLByLjkLGUu3YVbqf0keasBQ9rOLQlnnPlwETfgng
ZYrlNHBw3Ev3AnO/Jc7+n7aSNu4BLVHFZGeE1u8msRCinEKnvhUlUae9sezoqMq8
3nfh2zsrCf3AdvC+6TNw7k9zrIjbIH4EbIUYOEM3jT7EN53eTzye63yl0lYmm2Cs
hZr/YYzAQJ6sBnG7uZ7m6quiNe1F9zF/UczL0JkeSQS+8nGptvqkDkRt
=CN+W
-----END PGP SIGNATURE-----