[sionsmith]

Releases today's merged changes as v0.10.0. Updates the crate and lockfile versions, dates the changelog, and stamps all five man pages. Merging triggers the existing auto-tag and release workflows for binaries, checksums, Homebrew, Scoop, and documentation.

What ships:

• Adds message attachments delete --yes for uploaded files in the caller's own OneDrive, with checks that skip other drives and remote references (Safer attachment downloads; delete uploaded attachments #118).
• Reports metadata.has_more and metadata.next_link for paged lists, with a stderr hint in human/plain output (Report has_more and next_link on paged lists #117).
• Avoids replaying POSTs Graph may already have performed, handles empty PATCH responses, and improves Retry-After support (Stop replaying POSTs Graph may already have performed #115).
• Reports token-store failures as exit 10, preserves profile indexes, respects --config, saves config atomically, and prevents profile token-file collisions (Report storage failures instead of hiding them #116).
• Downloads files through exclusive temporary files (Safer attachment downloads; delete uploaded attachments #118), and includes today's dependency and release-action updates (deps: bump dirs from 6.0.0 to 7.0.0 #114, ci: bump the github-actions group with 2 updates #120, deps: bump the rust-minor group across 1 directory with 4 updates #121).
• Updates rustls to 0.23.46 and quinn-proto to 0.11.18 to clear nine RustSec advisories found during release verification. Only their required transitive dependencies change.

Validation:

• cargo audit: no vulnerabilities in 321 dependencies.
• cargo fmt -- --check, all five man pages with mandoc -Tlint, and git diff --check: passed.
• cargo test --all-targets --locked: 370 unit tests and 105 CLI tests passed with keyring access disabled.
• cargo check --all-targets --locked and cargo clippy --all-targets --locked -- -D warnings: passed.
• cargo build --release --locked: passed; the binary reports teams 0.10.0, retains the teams-cli storage namespace, and exposes the attachment-deletion help.

Upgrade notes: paged JSON output adds metadata without changing data. An unreadable token store now returns KEYRING_ERROR (exit 10) rather than a signed-out response. New profile names must use 1–64 ASCII letters, digits, ., _, or - and must not collide with an existing token file. Existing profile names continue to work.

No live Microsoft Graph smoke test is claimed for this release.