v2.10.0

What's Changed

• fix(baseline): evaluate every catalog in the installable release gate by @samartomar in #446
• fix(baseline-evidence): pull SkillSpector by digest instead of rebuilding in vet-once by @samartomar in #445
• feat(trust): detector precision — negated-prohibition guardrails and missing-license reclassification by @samartomar in #447
• feat(baseline-evidence): incremental vet — reuse per-component receipts when content and analyzer identity are unchanged by @samartomar in #450
• Release v2.10.0 by @samartomar in #452

Full Changelog: v2.9.0...v2.10.0