DiffBio 0.1.9

Changed

• Requires substrax>=0.1.11; the lock moves it from 0.1.10 and nothing else. 0.1.11 caps jax
  below 0.11.2, whose renamed jax.experimental.hijax.HiPrimitive flax 0.12.9 imports at
  module load; a resolver given substrax>=0.1.10 keeps jax 0.11.2 and picks 0.1.10 instead,
  so a fresh install of DiffBio failed on import diffbio until the floor moved.
• CI: the build-verification, documentation and security workflows cancel the run a newer
  push supersedes, as the test workflow already did; a contract test holds every
  push-triggered workflow to it.
• Requires datarax>=0.1.13; the lock moves it from 0.1.11. DiffBio builds no datarax
  pipeline of its own; its MemorySource subclasses inherit datarax's per-epoch order
  cache, and a pipeline a caller builds over a DiffBio source now serves batches with a
  valid_mask leaf and settles the epoch's final batch through drop_last.
• Requires substrax>=0.1.10; the lock moves it from 0.1.9. DiffBio uses substrax's
  optimizer, RNG, runtime and device modules, which 0.1.10 leaves as they were; it does not
  checkpoint through substrax's store, whose format 0.1.10 rewrote.