Sanitization Rust Crate v1.0.1

[eldryoth]

sanitization 1.0.1

Security patch release from pentest follow-up.

• Fixed SecretPool::try_allocate random-canary failure cleanup so slot bitmap release happens exactly once.
• Fixed native LockedSecretBytes<N> and GuardedSecretVec random-canary failure paths to avoid leaking locked/guarded mappings on CSPRNG failure.
• Clarified deterministic canary disclosure limits and documented the !Sync safety assumption for canary-failure clearing paths.

---

This discussion was created from the release Sanitization Rust Crate v1.0.1.