v1.10.2 — report the version we actually are

The tarball published as 1.10.1 was built before the 24 August source fix and never republished, so the package on npm did not match this repository.

The server reported the wrong version. Its VERSION constant still said 1.9.0 while the manifest said 1.10.1, so any MCP client asking the server to identify itself got an answer two releases out of date.

The generate_spf description overstated what the tool checks. It said exceeding the ten-lookup limit "is a PermError", phrased as though the builder counted every lookup. It counts direct mechanisms only — include and redirect targets add nested lookups it cannot see. A model reading the old text could tell someone their record was within the limit when it was not. The description now says so plainly and points at check_spf to validate a live record.

No tool was added or removed; the catalog is unchanged at 45 tools.