rk 0.1.10

• rk plan [unit] now renders the configured source-only release graph from
  the same stage and public dependency contracts that rk release executes;
  --json retains every direct edge without inventing runtime state.
• Terminal output now uses one semantic role-and-state vocabulary across
  commands, with plain-text parity, NO_COLOR support, and inert rendering of
  captured control bytes. Machine and redirected releases no longer inherit
  native login prompts.
• macOS release staging now verifies the rk-notary credential before any
  build starts, and interrupted producers discard only their declared,
  unreceipted outputs so retries can reuse validated independent lanes.
• Incomplete stages are described as incomplete rather than reviewed, and
  successful stage paths keep their content-addressed id on a readable line
  in narrow terminals.
• After exact publication read-back, rk gives pub.dev resolver visibility and
  Apple notarization-ticket visibility a bounded consumer check. Provider lag
  is reported as a nonblocking availability warning and never triggers a
  second publication attempt.
• rk init now omits workspace grouping roots and hides publish_to: none
  packages by default; press a to reveal intentional non-registry release
  candidates, while JSON still reports every discovered candidate.