chore(main): release 0.10.0

[github-actions]

🤖 I have created a release beep boop

0.10.0 (2026-10-12)

Features

• notify: make permission-prompt alerts on by default and discoverable (#1001) (7f8e5f0)

Bug Fixes

• acp: publish sub-run sessions loaded over ACP as view-only (#1078) (7f11491)
• agent: retry mid-stream transport aborts before tool dispatch (#1076) (b9ef1d2)
• cron: bound run history and read recent records from the tail (#1094) (42eb6ab)
• cron: preserve newer claims when overlapping runs complete (#1090) (2eb9d94)
• daemon: bound pending sessions and prune on completion (#1091) (8a68660)
• daemon: do not retry workers that finished with a final exit code (#1112) (eefa978), closes #1100
• daemon: stop worker process groups by their launch-time identity (#1088) (ab018b3), closes #861
• deps: refresh the lockfile to patched hono and @hono/node-server (#1080) (aa52040)
• mcp: forward image tool results on the existing image channel (#1077) (0324c1d)
• mcp: refresh OAuth tokens for discovered endpoints and registered clients (#1113) (571af70), closes #1101
• oauth: give every loopback callback server the bounded shutdown (#1079) (5473301)
• providers: send stable session headers to OpenCode (#1060) (99721c7)
• redaction: redact adjacent AWS keys glued end to end (#1095) (df67ede)
• redaction: redact credentials split by an invisible character (#1067) (e20b762)
• sandbox: say when a session's sandbox enforcement is degraded (#1082) (6b5852d)
• search: redact every text field of session metadata, not ten of thirty (#1073) (9520f2b)
• tui: show provider ownership in Recent and Favorites (#1083) (1697b7a)
• unbreak main CI (cron claim tests, Go 1.26.9) (#1124) (2c418fc)

---

This PR was generated with Release Please. See documentation.

[euxaristia]

Verified version-bumps-only (manifest, changelog, package files); it ships whatever main holds, so no interaction with the unmerged sandbox PRs. Twelve days stale but harmless.