0.10.0

Added

• Team Cymru Bogons provider, reporting whether the host falls in address space that
  should never appear as a source on the public internet, either unallocated by IANA or
  allocated but unrouted. Cached for four hours to match the source's rebuild, since a
  stale bogon list reports newly allocated legitimate space as unroutable
• GreenSnow provider, reporting whether the host appears on its list of addresses seen
  attacking servers. Cached for an hour: the list changed by seventeen entries over two
  minutes during review
• make smoke, a pre-release check that builds the release archives without publishing
  and exercises the packaged binary from a temporary directory with a throwaway HOME.
  make release depends on it, so a failure aborts before anything is published. It
  covers the gap unit tests cannot: they run inside the repository, so they could not
  catch 0.9.0 shipping a binary whose test data was unreachable outside the source tree
• README documentation for document_cache_ttl and result_cache_ttl, which were read
  from config but documented nowhere, so the cache durations were not discoverable

Changed

• bump ip-fetcher to v0.0.25, which supplies the two new provider sources
• size the IP range cache TTL per provider from how often each source actually
  publishes, replacing the blanket 24 hours. Sources that publish rarely move to 7 days
  (Akamai, Atlassian, CDN77, DuckDuckBot, OpenAI, PerplexityBot, UptimeRobot); each had
  gone a fortnight to two years without changing while being refetched daily, and
  DuckDuckGo serves its list with a one year cache header
• shorten the threat feed TTLs, which were the opposite problem: at 24 hours a blocklist
  lookup could be a day out of date. blocklist.de moves to 1 hour, the CINS Army list to
  2, DShield to 4 and Spamhaus DROP and Emerging Threats to 12, each measured against the
  cadence the source was observed to publish at