[siracusa5]

Summary

Prepare ContextCake desktop 0.10.1 so the dependency/security updates in #205 and #210 reach installed users. Align the desktop, root, and standalone CLI package versions with the release tag; dependency resolutions are unchanged.

Changes

• Bump the three coordinated package versions and desktop lockfile root metadata to 0.10.1.
• Publish through the existing app-v* workflow after merge and green CI. That workflow verifies signed/notarized Mac builds, the Intel runtime, Linux packaging, checksums, update feeds, and matching public deployments.

Test Plan

• Version alignment assertion and diff whitespace check.
• All five release test suites pass on Node 22.23.4.
• Underlying dependency candidate already passed 76 root suites, 186 desktop tests, navigation/CLI checks, relaunch and isolation smokes, packaging, and post-merge CI/CodeQL in chore(deps): consolidate desktop and CodeQL updates #210.
• Release PR CI and independent review; post-merge CI and CodeQL also passed.
• Signed release workflow and canonical download/update-feed acceptance after tagging.

Notes

Accounts remain disabled. npm registry publication is a separate gated process. The pre-existing optional smoke:ui harness failures documented in #210 remain outside this version-only change.

Published release acceptance

• ContextCake 0.10.1, commit 02415ef8a34b28ea013218dce034208e05ca7a8f.
• Release workflow passed: both Mac architectures signed/notarized/stapled, Intel runtime smoke, Linux install/runtime smoke, complete platform upload, matching site/demo deployment and provenance.
• All 16 expected release assets present. API digests match SHA256SUMS; downloaded arm64 update archive matches both SHA256SUMS and feed SHA512/size. Both platform feeds advertise 0.10.1 and the appropriate files.
• Downloaded Mac app passes deep/strict codesign verification, Gatekeeper (Notarized Developer ID), and stapler validation.
• Downloaded app's bundled CLI reports 0.10.1. Temporary-profile runtime smoke passes: API 200, unauthenticated 401, sandbox on, 10ms main-loop lag, zero failed engine probes. The app's real update check resolves latest 0.10.1.
• Canonical https://contextcake.com/install/, download redirects, /demo/, and hosted demo release provenance verified for this tag and commit.
• Post-merge CI and CodeQL pass; open Dependabot/code-scanning alerts remain zero.