WIP: Bump dev version to 0.10.0 and remove numpy<2 constraint

[Copilot]

Plan: Bump dev version to 0.10.0 and fix dependency problem

Based on the issue analysis, I need to:

• Update version from 0.9.4 to 0.10.0.dev in all version files:
  • version.bzl - Update SPU_VERSION
  • update_version.py - Update SPU_VERSION_PREFIX
  • MODULE.bazel - Update version field
  • src/MODULE.bazel - Update version field
  • src/libspu/version.h - Update SPU_VERSION define
• Fix dependency problem in pyproject.toml:
  • Update numpy constraint from numpy<2,>=1.22.0 to numpy>=1.24.0 (removes <2 limit)
  • Update JAX version from jax[cpu]==0.6.2 to jax[cpu]>=0.4.35 (more flexible, supports numpy 2.x)
• Verify the changes don't break existing functionality
• Run security checks on new dependencies (passed)
• Remove CodeQL artifact file that was accidentally committed
• Add CodeQL artifacts to .gitignore to prevent future accidents

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[Feature]: Bump dev version to 0.10.0 and fix dep problem</issue_title>
<issue_description>### Feature Request Type

Build/Install

Have you searched existing issues?

Yes

Is your feature request related to a problem?

SPU 0.9.4 depends on [jax[cpu]==0.6.2]
JAX 0.6.2 requires ml-dtypes>=0.5.0 which requires [numpy>=2.1.0]
But SPU 0.9.4 also constrains [numpy>=1.22.0,<2]

Describe features you want to add to SPU

A clear and concise description of what you want to happen.

Describe features you want to add to SPU

A clear and concise description of any alternative solutions or features you've considered.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes [Feature]: Bump dev version to 0.10.0 and fix dep problem #1285

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}

[tpppppub]

What is _codeql_detected_source_root?

[rivertalk]

@copilot

[Copilot]

_codeql_detected_source_root is an artifact file created by the CodeQL security scanner. It was accidentally committed when I ran the security checks. I've removed it in commit 8600bc2 and added it to .gitignore to prevent this from happening again.

[tongke6]

LGTM