v0.10.0

v0.10.0 — dependable unattended use

The 2026-08-09 product review's second tranche, closing its third and last
structural finding. Tool calls run off the MCP read loop and a cancellation
is honoured; renders are recorded so a paid one can be found again; cost is
stated before it is spent and a budget can refuse it; four outcomes have
four exit codes with --json throughout; and a weekly canary asks the
providers whether they still speak our protocol.