v1.10.1

• Take spauth v0.1.2, which seals the token cache
• Write xftp history 0600, as SECURITY.md says
• Remove author and AI-assistance attribution; it belongs in source file headers
• apt_repo, not apt_package
• Package versions stop coming from Dependabot
• Dependabot merges move to the organisation's sweep
• Packaging starts on the release rather than on the tag
• The profile is targets and names
• Retire the curl installer: apt, Homebrew, winget and cargo are the paths
• Dependabot: monthly, grouped, merged when every run on the commit is green
• Delete the Defender scan caller: the scan never predicted winget's validation
• Delete the release document: ship is the procedure
• Name a command that exists for the skill install
• Stop pegging the support window to a major version
• Regenerate the parameter block from ship.conf
• Rename release.conf to ship.conf
• Take the commands to smoke from release.conf
• Run the arm64 packages before anybody installs them
• Add release.conf, the parameter block a script can read
• Cover all three library-selection rules in the live suite
• Add a live test suite as the pre-release pass