v1.10.1

Fixed

• Preserve canonical claim resource digests in JSON claim, handle, and run output without exposing credentials.
• Add release --if-claim-id to prevent releasing a replacement claim when a contextual handle changes after inspection.