chore(sec-core): remerge v0.10.0 branch commits - #2552

The openclaw prompt-scan capability passed the user prompt as a
`--text` argv to `agent-sec-cli scan-prompt`, leaking it via
/proc/<pid>/cmdline to other local users and risking E2BIG
fail-open when a large prompt exceeded ARG_MAX (~2MB).

Pipe the prompt via the existing `stdin` option on callAgentSecCli
instead, matching codex/hermes/qoder/qwen. agent-sec-cli
scan-prompt already reads stdin when --text is absent, so no CLI
change is needed. Unit tests are updated to assert `opts.stdin` and
the absence of `--text` in argv.

Closes #2373

Signed-off-by: Shirong Hao <shirong@linux.alibaba.com>

prompt-scan.ts pipes the prompt via stdin (callAgentSecCli opts.stdin)
to avoid /proc/<pid>/cmdline exposure and ARG_MAX limits, mirroring
codex/hermes/qoder/qwen. The e2e pilot wrapper only read stdin when
the argv carried a --stdin flag (the pii-scan pattern), so scan-prompt
calls with no --text argv left input undefined, skipped the deny
override, and forwarded empty stdin to the real CLI — the plugin
fail-opened and gateway-probes could not find the expected pass/deny
signals.

Read stdin once for scan-prompt when no --text argv is present, use
it for both override matching and forwarding to the real CLI. Backward
compat: scan-code (--code argv) and scan-pii (--stdin flag) unchanged.

Closes #2373

Assisted-by: Qoder:1.22.1
Signed-off-by: Shirong Hao <shirong@linux.alibaba.com>

Bump the component manifest, CLI package, and all six agent plugin manifests to 0.10.1.

Record the two release fixes in CHANGELOG.md and add the matching RPM spec changelog entry.

Version strings and release notes only; no scanner, hook, or daemon behavior changes here.

Signed-off-by: yizheng <YiZheng.Yang@linux.alibaba.com>