nightly: refresh public-CVE cut (automated; release-cert passing)

nightly: refresh public-CVE cut (automated; release-cert passing)

Card fixes: correct inference_example record-2 to TPU-QUIC (not the excluded RPC class); name the eval metric (binary ROC-AUC) and cite the dataset card's held-out-chain macro-F1 in the LOCO section

Add nr-network-known-class-detector: v10 public-CVE cut (39 primitives, 9 chains, held-out ROC 0.9082)