v1.6.10

Changelog

• a9c026e chore(deps): update helm chart version
• f3c8e87 chore(trivy): ignore debian gzip CVE-2026-41992
• 69df398 chore(trivy): ignore debian libacl1/libattr1 CVEs
• ed3df4e chore(trivy): ignore debian liblmdb0 CVEs
• 8d2fc67 chore: add Claude Code workflows (#462)
• 3c4909a chore: drop netfault.SetSnapshotRestore call (#461)
• f7073c7 chore: silence SonarQube finding on secrets: inherit in Claude workflows
• 5af7fd1 chore: update changelog for v1.6.10
• 4e0bccc feat: consolidate two env vars into one for network root-qdisc handling (#460)
• 65d52f4 feat: opt-in qdisc snapshot/restore for network attacks (#459)
• 5a97d59 feat: thread qdisc snapshot through per-execution state (#463)