dunn.dev/pipeline 4.10.0

`ci-runtime-node` moves to Node 24 (`ubi10/nodejs-24-minimal:10.2`). A
**minor**: no template input added, removed or renamed. A `ci-runtime-node`
consumer gets Node 24 on its next bump; the `ci` builder image stays on
Node 22. `claude-drift-triage` defaults to `claude-sonnet-5-5`.

### Changed

- **`ci-runtime-node`'s Node major moves 22 to 24.** The base is now
  `ubi10/nodejs-24-minimal:10.2` (was `nodejs-22-minimal`). A consumer gets
  Node 24 on its next `ci-runtime-node` bump; `bitwarden-cli` and `othala`
  are the consumers. The `ci` builder image is unchanged.
- **`renovate-config.json`: the UBI image rules cover `nodejs-24` as well as
  `nodejs-22`.** The ubi9-to-ubi10 replacement rules and the clean `X.Y` tag
  rule list the `nodejs-24` and `nodejs-24-minimal` names beside the 22 ones,
  so `nodejs-24` rejects date-stamped tags too. The Node major is part of the
  image name, so Renovate never moves `nodejs-24` to another Node major on
  its own; behaviour for `nodejs-22` is unchanged.
- **`claude-drift-triage`: default model is now `claude-sonnet-5-5`** (was
  `claude-sonnet-5`), the current Sonnet on the API. Consumers that set
  `model` are unaffected.

### Fixed

- **`claude-drift-triage` reads the first text block of the response**
  instead of `content[0]`, and reports a refusal as such.