WIP: Bump dev version to 0.10.0 and remove numpy<2 constraint

[Copilot]

Plan: Bump dev version to 0.10.0 and fix dependency problem

Based on the issue analysis, I need to:

• [x] Update version from 0.9.4 to 0.10.0.dev in all version files:
  • [x] version.bzl - Update SPU_VERSION
  • [x] update_version.py - Update SPU_VERSION_PREFIX
  • [x] MODULE.bazel - Update version field
  • [x] src/MODULE.bazel - Update version field
  • [x] src/libspu/version.h - Update SPU_VERSION define
• [x] Fix dependency problem in pyproject.toml:
  • [x] Update numpy constraint from numpy<2,>=1.22.0 to numpy>=1.24.0 (removes <2 limit)
  • [x] Update JAX version from jax[cpu]==0.6.2 to jax[cpu]>=0.4.35 (more flexible, supports numpy 2.x)
• [x] Verify the changes don't break existing functionality
• [x] Run security checks on new dependencies (passed)
• [x] Remove CodeQL artifact file that was accidentally committed
• [x] Add CodeQL artifacts to .gitignore to prevent future accidents

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[Feature]: Bump dev version to 0.10.0 and fix dep problem</issue_title> <issue_description>### Feature Request Type

Build/Install

Have you searched existing issues?

Yes

Is your feature request related to a problem?

SPU 0.9.4 depends on [jax[cpu]==0.6.2] JAX 0.6.2 requires ml-dtypes>=0.5.0 which requires [numpy>=2.1.0] But SPU 0.9.4 also constrains [numpy>=1.22.0,<2]

Describe features you want to add to SPU

A clear and concise description of what you want to happen.

Describe features you want to add to SPU

A clear and concise description of any alternative solutions or features you've considered.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes secretflow/spu#1285

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[github-actions[bot]]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}