v0.10.0

Closes the Heystaq integration-key report.

Breaking: GoAlertService status no longer publishes the integration-key
bearer token. Read the Secret named by secretRef instead.

Key removal is now declarative but opt-in, defaulting to orphan, with a
circuit-breaker refusing wholesale deletion on an empty spec. No API key
reissue is required to upgrade.