v0.10.0 Closes the Heystaq integration-key report. Breaking: GoAlertService status no longer publishes the integration-key bearer token. Read the Secret named by secretRef instead. Key removal is now declarative but opt-in, defaulting to orphan, with a circuit-breaker refusing wholesale deletion on an empty spec. No API key reissue is required to upgrade.