v3.10.1

- Download failures now reject with a `DegitError` (an `Error` with `code`) instead of a plain object.
- Log the name of each environment variable read by `search_replace` directives.
- Bound `search_replace` regex execution with a 1s timeout and skip files larger than 10MB.
- Cap HTTP redirects at 5 when downloading archives, require a `Location` header, and refuse non-HTTPS redirect targets.
- Warn when `clone` directives nest deeper than 5 levels.
- Fix proxied archive downloads to URLs with a non-default port sending the port inside the `hostname` field.