[SizzleUnrlsd]

Release 0.8.0 adds four changes, following #134, #140 and #143:

• Sanitizers through project functions (Precision: validators and sanitizers apply through project functions #134). A sanitizer called inside a project function now protects the flows through it, for every caller. Function summaries keep the taint kinds cleared on every path. This removes 8 healthchecks false positives, among them the open redirects through reverse in _check_2fa and the badge XSS rendered through an escaping template.
• Validators declared on project functions (Precision: validators and sanitizers apply through project functions #134). A Validator may name a function of the project, and the refutation recognises it in its own module too.
• Validators prove only their declared kinds (Refutation: a validator proves only the kinds it declares #143). A validator declared for some kinds no longer refutes a flow that carries another kind into the sink; such a flow is a hotspot. This fix was needed before projects declare their own validators.
• Plugin.project_models(root) (Plugins: models read from the project under analysis #140). A plugin may read models from the project under analysis. This is what enterprise-validators needs, so a project can declare its validators in a file. The command line now reports ModelError as an error instead of a traceback.

The cache format moved from 9 to 10 in this release, so existing caches are recomputed on the first run.

Changes in this PR

• Version: bumped in pyproject.toml, coretrace_python.__version__, the release test and the report example of the usage guide.
• CHANGELOG.md: the Unreleased section is dated as 0.8.0, with Precision before Plugins as in earlier releases. No entry changed.

Verification

• pytest: 1082 passed.
• pytest -m regression under Python 3.12: 19 passed.
• ruff check src tests and mypy are clean.

Tag v0.8.0 after merge to publish.