1.0.0-RC10

fix: Relax version guard regex to accept all valid versions rather than a select subset
fix(release): preserve files staged by earlier tasks in release commit
feat(deps): detect installer-plugin need via lock walk, drive composer config.allow-plugins
feat(ci): surface PHPStan watermark+1 advisory in PR comment and lane table