Promtect v0.1.10

What's Changed

• feat(egress): harden network layer — no upstream redirects, read timeout, fail-closed bind, graceful shutdown by @Amitk3293 in #48
• fix(detect,mask): CALL_EXPR anchor, placeholder guards, Zeroizing<Match.value>, unmask_miss audit by @Amitk3293 in #49
• fix(vault): pre-size maps with_capacity(8), random 128-bit sentinel tags by @Amitk3293 in #50
• fix(audit): repair 0600 on pre-existing log, cache file handle, warn-once on write failure by @Amitk3293 in #51
• fix(metrics): streaming audit reads, label sanitization, newest-first recency ordering by @Amitk3293 in #52
• release: v0.1.10 — egress hardening, detector accuracy, memory zeroize, audit hygiene, metrics by @Amitk3293 in #53

Full Changelog: v0.1.7...v0.1.10