Patch release for dependency security and maintenance automation.

- Update the Go/TUI dependencies and require Go 1.26.10 or newer for source builds.
- Add weekly grouped Dependabot updates and reachable-vulnerability checks.
- Pin release and CI Actions to verified revisions.

The animator remains independent of sway-session. Existing CLI options and the presentation mark protocol remain unchanged.

Upgrading from v0.9.3 or earlier: upgrade sway-title-animator first, then install the separate sway-session package before restarting Sway; alternatively install both replacement package files in one explicit `pacman -U` transaction. Both ownership transitions were tested with actual source-built packages in isolated package-manager roots. Do not use `--overwrite` or assume an AUR helper combines updates atomically.

Validation: exact Go 1.26.10 `make verify`, Linux amd64/arm64 GoReleaser snapshot and package inspection, local-tarball Arch build/tests, shared wire-fixture comparison, and clean/sequential/atomic package installation checks.

Release commit: 5894c26889171f61783a7bd98757dacfc8b9b57e.

[Full changelog](https://github.com/marang/sway-title-animator/compare/v0.10.0...v0.10.1) · [Release tracking](https://linear.app/riotbox/issue/LAB-390/validate-and-publish-sway-title-animator-v0101)