docs: publish hayate-auth 0.10.4 evidence

[yhay81]

Summary

• advance the canonical compatibility snapshot from hayate-auth 0.10.3 to 0.10.4
• pin the exact main CI and security-profile runs at merge commit 938751d0f225def770d6ae47e1da3da40829c8d1
• add the successful Trusted Publishing / SBOM / provenance release run as first-class evidence
• regenerate the Markdown and machine-readable compatibility artifacts

Why

The canonical public ledger still identified 0.10.3 after 0.10.4 was released.
Keeping release, CI, security, and provenance evidence on one exact commit
prevents the organization profile and documentation site from making stale
package claims.

Validation

• 8 unit tests
• vendored golden-app evidence verification
• generated compatibility/profile drift checks
• link checks
• fresh public create-hayate==0.13.1 production scaffold: 17 tests, Ruff, and 6 checked-SQL queries
• zizmor 1.28.0: no findings
• git diff --check