1.0.0-rc.10

- Add tracked and overlay-backed directory subtree renames, including destination replacement, restart persistence, open-handle behavior, and Git porcelain coverage.
- Prevent daemon mount preparation from hydrating blobless repositories or hanging indefinitely, while preserving cancellation and releasing preparation locks on timeout.
- Harden the Docker and Cloudflare Sandbox examples with tighter workflow permissions, startup and version checks, and container integration coverage.
- Update dependencies and expand regression and race coverage for lazy-fetch invariants, shutdown deadlocks, structured log redaction, mount observability, and ready-gate recovery.