v0.10.0

What's Changed

• docs: formalize release and async review policy by @omkhar in #100
• Document release review workflow and refresh roadmap by @omkhar in #101
• [codex] Harden managed runtime and validation boundaries by @omkhar in #102
• [codex] Remove remote heavy validation lane by @omkhar in #103
• [codex] Align hosted controls with current review posture by @omkhar in #105
• chore: bump docker/build-push-action from 7.0.0 to 7.1.0 in the github-actions group by @dependabot[bot] in #104
• Align docs with current session and rollout state by @omkhar in #106
• Enforce traceability for release-facing docs by @omkhar in #108
• Repair mainline validate-repo baseline by @omkhar in #110
• Refresh release pins and cap Claude at 2.1.104 by @omkhar in #109
• Fix session runtime control and resize regressions by @omkhar in #107
• Refresh release inputs with a Claude 2.1.104 holdback by @omkhar in #112
• Add recurring release readiness sweeps by @omkhar in #113
• Harden smoke host-path handling against symlink traversal by @omkhar in #111
• Harden runtime control-plane boundaries by @omkhar in #114
• Align hosted-controls policy with review-gated main by @omkhar in #115
• Release v0.10.0 by @omkhar in #116

Full Changelog: v0.9.3...v0.10.0