v2.9.10

<!-- Release notes generated using configuration in .github/release.yml at v2.9.10 -->

## What's Changed
### Changelog
* release(turborepo): 2.9.9-canary.4 by @github-actions[bot] in https://github.com/vercel/turborepo/pull/12716
* release(turborepo): 2.9.9 by @github-actions[bot] in https://github.com/vercel/turborepo/pull/12719
* fix: Respect SCM env vars in `turbo query affected` by @anthonyshew in https://github.com/vercel/turborepo/pull/12722
* ci: Package VSCode extension in release workflow by @anthonyshew in https://github.com/vercel/turborepo/pull/12723
* fix: Avoid some raw `create-turbo` example telemetry by @anthonyshew in https://github.com/vercel/turborepo/pull/12725
* fix: Escape graph HTML payloads by @anthonyshew in https://github.com/vercel/turborepo/pull/12726
* fix: Prevent OTEL token injection to spoofed origins by @anthonyshew in https://github.com/vercel/turborepo/pull/12727
* fix: Retry HTTP status failures by @anthonyshew in https://github.com/vercel/turborepo/pull/12728
* fix: Validate microfrontend proxy Host header by @anthonyshew in https://github.com/vercel/turborepo/pull/12730
* fix: Redact task hash env debug logs by @anthonyshew in https://github.com/vercel/turborepo/pull/12733
* fix: Filter microfrontend proxy environments by @anthonyshew in https://github.com/vercel/turborepo/pull/12732
* fix: Preserve FSEvents mount points for device-relative paths by @anthonyshew in https://github.com/vercel/turborepo/pull/12729
* fix: Validate proxy Host headers by @anthonyshew in https://github.com/vercel/turborepo/pull/12731
* fix: Resolve TypeScript `.js` extension imports to `.ts` files in boundaries by @maschwenk in https://github.com/vercel/turborepo/pull/12644
* fix: Use random temp path for repo downloads by @anthonyshew in https://github.com/vercel/turborepo/pull/12736
* release(turborepo): 2.9.10-canary.1 by @github-actions[bot] in https://github.com/vercel/turborepo/pull/12734
* fix: Reject OTel endpoints with userinfo by @anthonyshew in https://github.com/vercel/turborepo/pull/12737
* fix: Authenticate local devtools WebSocket by @anthonyshew in https://github.com/vercel/turborepo/pull/12738
* fix: Handle clipboard exec errors by @anthonyshew in https://github.com/vercel/turborepo/pull/12739
* fix: Restrict Vercel token reuse to trusted API origins by @anthonyshew in https://github.com/vercel/turborepo/pull/12740
* fix: Keep workspace config discovery inside root by @anthonyshew in https://github.com/vercel/turborepo/pull/12741
* fix: Hardening for daemon IPC endpoints by @anthonyshew in https://github.com/vercel/turborepo/pull/12742
* fix: Enforce cache filesystem boundaries by @anthonyshew in https://github.com/vercel/turborepo/pull/12743


**Full Changelog**: https://github.com/vercel/turborepo/compare/v2.9.9...v2.9.10