Fix format string vulnerabilities

Never pass user input as first argument of printf(1),
similar to how you never do that with printf(3).

Signed-off-by: Thorsten Glaser <tg@mirbsd.org>
CONTRIBUTORS: Update
Release v1.20140507
Revert "Introduce static manpage as part of normal repo"

This reverts commit 056f86ae9a3c25fd2e0b74ac6b81d9b0d5630818.

Conflicts:
	vcsh.1

This messes too much with my Debian packaging workflow; I will introduce
a new branch with static manpages (basically what I did for homebrew).
Release v1.20140508
Merge branch 'master' of github.com:RichiH/vcsh