v0.5.10

Fixed

• Moved the Linux ARM Rust wheel build to GitHub's native
  ubuntu-24.04-arm runner so maturin executes the ARM manylinux CPython 3.12
  interpreter instead of failing with an x86 Exec format error.
• Moved the release container to the pinned Python 3.13 slim digest so the
  runtime image no longer carries the Python 3.12 HIGH finding reported by
  Grype.
• Tightened container scanner policy so Trivy and Grype still scan all layers
  while failing releases only on fixable HIGH or CRITICAL findings.

Added

• Extended release-workflow hygiene tests to guard the native Linux ARM runner
  selection, the Python 3.13 container base-image digest, and fixable
  vulnerability scanner gates.