Release RustQueue 0.10.0: WebSocket TTL live subscriptions

[SamuelSupe]

Summary

• add the default-off rustqueue.live.v1 WebSocket feed for existing TTL_DISCARD Topics
• add bounded connection/frame budgets, Origin and AUTH handling, TTL-aware writes, metrics, Discovery CORS, and Operator/Helm/CRD configuration
• close live connections across RELIABLE policy transitions, including coalesced policy notifications, and prevent missing Topics from being auto-created
• update RustQueue to 0.10.0 with README, architecture, Kubernetes operations, website, and release notes

P0/P1 review

• no P0 issue found
• fixed the Topic deletion/handshake race that could recreate a missing Topic
• fixed the policy-watch coalescing race that could keep a connection alive across TTL_DISCARD to RELIABLE to TTL_DISCARD

Validation

• OrbStack Rust 1.88: fmt, check, test, and Clippy passed
• Helm lint/template and seven fuzz targets passed
• Go/Python core and secure compatibility matrices passed
• release metadata verification passed for 0.10.0
• Console typecheck, 2 tests, and production build passed with the existing local offline cache; the container attempt was blocked only by npm registry metadata access

Merging to main runs the existing release workflow, which creates v0.10.0 and publishes the native, source, Helm, and checksum assets.