v0.10.0

• Add a _url field-name suffix that scrubs credentials embedded inside a URL value — the userinfo password and any query parameter whose name follows the _secret/secret-name rule — while preserving the scheme, host, path, and benign parameters, implemented identically across Rust, Go, Python, and TypeScript.
• Add redact_url_secrets / redact_url_secrets_with_options helpers to redact secrets in a single URL string directly, for callers that interpolate a URL into a free-form log or error message before emitting it.
• Refresh the Rust toolchain to 1.96 and upgrade workspace dependencies.