10.0.0

CHANGES:

• dns-certify: use a pair instead of two separate arguments for the dns-key
  (#357 @hannesm)
• add KSK 2024 (#358 @hannesm)
• update to mirage-crypto 1.2.0 API changes (#362 @hannesm)
• use dune variants, avoid functors (#363 @hannesm)