chore: bump version to 0.4.10

[kacy]

Release prep for v0.4.10. Cutting the release itself is a separate step: once this merges, pushing the v0.4.10 tag triggers release.yml (builds + GHCR/Docker Hub/npm/Homebrew publish).

Changes

• Cargo.toml + Cargo.lock: workspace 0.4.9 → 0.4.10
• helm/ember/Chart.yaml: chart 0.1.2 → 0.1.3, appVersion 0.4.9 → 0.4.10
• CHANGELOG.md: promote the unreleased section to a complete 0.4.10 (2026-07-04) entry

What's in 0.4.10 (17 commits since v0.4.9)

• feature: PROTO.SCAN / PROTO.FIND (feat: add PROTO.SCAN and PROTO.FIND commands #341)
• fixes: AOF mid-file corruption rollback (fix: tier 1 correctness and ops fixes (AOF recovery, healthcheck, helm secrets) #355), the vector feature now compiles + is CI-gated (fix: make the vector feature compile again + gate it in CI #360), Dockerfile healthcheck (fix: tier 1 correctness and ops fixes (AOF recovery, healthcheck, helm secrets) #355), helm Secret-backed requirepass (fix: tier 1 correctness and ops fixes (AOF recovery, healthcheck, helm secrets) #355), shutdown fsync logging (fix: tier 1 correctness and ops fixes (AOF recovery, healthcheck, helm secrets) #355), cluster test flakiness (fix: cluster test flakiness and missing ember-cli binary #343), aws-lc-sys security bump clearing RUSTSEC-2026-0045/0047/0048 (fix(deps): bump aws-lc-sys to 0.42.0 to clear RUSTSEC advisories #363)
• deprecation: concurrent mode (refactor: move slot hashing to ember-protocol, deprecate concurrent mode #358)
• internal: stale client regen + new CI gates (fix: regenerate stale python/ts clients + msrv/client/proto-drift CI gates #356/fix: make the vector feature compile again + gate it in CI #360), slot-hashing moved to ember-protocol (refactor: move slot hashing to ember-protocol, deprecate concurrent mode #358), execute.rs/grpc.rs splits + boilerplate reduction (refactor: split execute.rs into exec/ sub-modules + move COMMAND_TABLE to ember-protocol #340/refactor: reduce command wiring boilerplate #344/refactor: split grpc.rs into per-family modules + cluster failover test #359), failover test (refactor: split grpc.rs into per-family modules + cluster failover test #359/test: de-flake cluster failover test with a WAIT replication barrier #361), docs (docs: refresh docs stale after the cleanup series #362)

Note

helm/** changed, so merging this also triggers the independent release-chart workflow (publishes the updated chart). That's expected and correct — the chart's appVersion should track the new app version.