v0.10.0

Added

• deployment.Controller is the sole public signed-application publication
  workflow. Deploy, Deactivate, Recover, and Status operate on exact
  Config inputs, generation proofs, immutable service plans, and durable v1
  receipts and transactions under .daemonkit-deployment.

Changed

• Service replacement is fenced by an exact operation, consumer-policy
  binding, and canonical plan. Completion and deployment acknowledgement are
  persisted independently, ordinary convergence is rejected while a fence is
  active, executable paths must be exact, and prior plan history survives when
  its executable is no longer resident.
• The application release template consumes an artifact-only reusable
  workflow, stages and publishes one caller-owned draft by exact release ID,
  and publishes a stable cask only after local and public-asset verification.

Removed

• The public fetch package and its one-step installation API. This is a hard
  cut with no compatibility aliases, legacy readers, or fallback state paths.