[LauraGPT]

Scope

Publish the already-merged #3865 fix as standalone funasr-onnx 0.4.10.
Offline/streaming Paraformer, SenseVoice and offline VAD decode supported audio
directly with librosa rather than treating all non-WAV input as MP3 and creating
a WAV sidecar. Codec availability still depends on the installed backend.
This PR changes version/docs/contracts only; no new inference implementation.
It does not include the open SenseVoice #3861 or VAD #3862 work.

Evidence

• Version/docs RED:3 failed,6 passed; completed source GREEN:45 passed.
• New installed FLAC/list regressions fail on the official0.4.9 wheel with the
  old undeclared pydub path (2 failures). The original results are retained.
• Actual candidate wheel and sdist installations:42 passed each,0 skipped.
  Four loaders cover lossless FLAC, WAV/FLAC lists and order, ndarray identity,
  visible invalid-audio errors and no sidecar writes. Existing wrapper errors,
  streaming overlap/empty-final/VAD and punctuation cases remain selected.
• Strict Twine and all13 installed module bytes match the tested source.
• Prior exact-source fix(onnx): load non-.wav audio paths with librosa instead of pydub #3865 NVIDIA L20Z/ORT1.23.2 CUDA fixture evidence is reused:
  Paraformer FLAC path versus ndarray,48000 samples,10 CUDA nodes/0 CPU nodes.
  Four changed source modules are byte-identical to that accepted PR snapshot.
  This is not new GPU execution, all-model inference, pretrained ASR quality,
  BF16, or full-root-suite validation. No new weights were downloaded.
• Local tests use a private HOME/network namespace and a dependency-bearing
  environment. The new hosted Python3.11/3.12 matrix must separately prove
  clean torch-free installation and the installed wheel/sdist contracts.

Publication Gates

Normal signed+DCO PR merge only after exact-head CI and fresh full protection,
identity, permission, head/main and discussion checks. New-main CI and actual
checkout trees are accepted separately. The runtime tag is accepted against
the verified main artifacts and actual workflow triggers, not nonexistent CI.
GitHub receives wheel,sdist,SHA256SUMS as a non-latest runtime release; root
1.4.25 stays latest. PyPI is last, followed by actual official download hashes.
Nano and production remain unchanged.