v0.4.10

What's Changed

• fix(vgi-core): find the Signed-by-DID trailer block the way git does by @stormer78 in #47
• chore(deps): take the resolver line that guards did:webvh resolution by @stormer78 in #48
• chore(deps): hold rand at 0.8 in Dependabot until pgp supports rand 0.9+ by @stormer78 in #49
• chore(deps): take vta-sdk 0.38.0 and drop didwebvh-rs 0.6.1 by @stormer78 in #51
• test: merge-gate the SEC-4045 workflow injection and action pinning fixes by @stormer78 in #52
• test(did-git-sign): serialise the hook tests that exec what they just wrote by @stormer78 in #54
• chore(release): bring the workspace to 0.4.10 so the vta-sdk 0.38 move can publish by @stormer78 in #53

Full Changelog: v0.4.9...v0.4.10