release: 1.0.2 in all four bindings

[EricAndrechek]

Release prep for 1.0.2 in all four bindings, released together again after Go's metadata-only 1.0.1.

What 1.0.2 carries (all merged into v1):

• Known 1.0 limitation: setup latches an image zone the library does not know; the process cannot recover without a restart #458: setup latches only once a library completes its setup, so a zone the library refuses no longer fixes the process until a restart. All four bindings, with one shared case (setup: latch only on success (#458) #461).
• Known 1.0 limitation (library fixed; Go improved in 1.0.2; remaining gap open): Schema.Rows scaling across goroutines #456, Go only: Rows decodes and runs with far fewer allocations. A full call on a reported 100-row shape drops from 412 allocations / 75 KB to 76 / 45 KB (go: allocation-light Rows decoding (#456) #462, go: cut Rows' remaining per-call allocations (#456) #464).
• CI (CI never runs Go's stub-backed public-API tests (TestStub*, TestRegistry*): they skip by name everywhere #463): every stub-backed Go test now runs under the race detector (ci: run every stub-backed public test with the stubs set (#463) #465). No package change.

This PR changes only:

• versions:
  • Go bindingVersion (the User-Agent constant);
  • Python pyproject.toml and its own uv.lock entry;
  • Rust Cargo.toml and its own Cargo.lock entry;
  • TS package.json.
  • Python, Rust and TS read their User-Agent version from the package.
• the four CHANGELOG 1.0.2 headings, dated 2026-10-06. Python, TS and Rust note that there is no 1.0.1 of them.
• docs/guides/settings.md: one sentence on the setup latch's failure case.

Checked locally:

• lint-public, lint-spelling, lint-cited-paths, policy-merge-check --check-carve-out, gen-constants --check;
• markdownlint and dprint on the touched files;
• the Go User-Agent test, cargo check --locked and uv lock --check.

The release dry runs for all four run from this branch before the tags.

🤖 Generated with Claude Code