Bump version to 0.9.5 (#1324)

# Pull Request

## What problem does this PR solve?

Issue Number: Fixed #N/A

Version bump to 0.9.5 for release targeting `release/0.9.x` branch.

## Changes

- Updated version strings from 0.9.4 to 0.9.5 in:
  - `MODULE.bazel`
  - `src/MODULE.bazel`
  - `version.bzl`
  - `src/libspu/version.h`

All version references now consistently reflect 0.9.5 across Bazel
modules and C++ headers. Python build system reads version from
`src/libspu/version.h` via `pdm_build.get_version()`.

## Possible side effects?

- Performance: None

- Backward compatibility: None - version metadata only

> [!WARNING]
>
> <details>
> <summary>Firewall rules blocked me from connecting to one or more
addresses (expand for details)</summary>
>
> #### I tried to connect to the following addresses, but was blocked by
firewall rules:
>
> - `releases.bazel.build`
> - Triggering command:
`/usr/local/lib/node_modules/@bazel/bazelisk/bazelisk-linux_amd64
/usr/local/lib/node_modules/@bazel/bazelisk/bazelisk-linux_amd64 query
//... --output=label` (dns block)
>
> If you need me to access, download, or install something from one of
these locations, you can either:
>
> - Configure [Actions setup
steps](https://gh.io/copilot/actions-setup-steps) to set up my
environment, which run before the firewall is enabled
> - Add the appropriate URLs or hosts to the custom allowlist in this
repository's [Copilot coding agent
settings](https://github.com/secretflow/spu/settings/copilot/coding_agent)
(admins only)
>
> </details>

<!-- START COPILOT CODING AGENT SUFFIX -->



<details>

<summary>Original prompt</summary>

> bump version to 0.9.5, then create pull request try to merge into
release/0.9.x


</details>



<!-- START COPILOT CODING AGENT TIPS -->
---

💡 You can make Copilot smarter by setting up custom instructions,
customizing its development environment and configuring Model Context
Protocol (MCP) servers. Learn more [Copilot coding agent
tips](https://gh.io/copilot-coding-agent-tips) in the docs.

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: tongke6 <124763920+tongke6@users.noreply.github.com>

Author: Copilot

.gitignore

@@ -70,4 +70,5 @@ spu/lib*.dll
 
 BeaverCache.*
 *.jpg
-*.png
+*.png
+_codeql_detected_source_root

MODULE.bazel

@@ -25,7 +25,7 @@ Secure Processing Unit
 
 module(
     name = "spu",
-    version = "0.9.4",
+    version = "0.9.5",
     compatibility_level = 1,
 )
 

src/MODULE.bazel

@@ -21,7 +21,7 @@
 
 module(
     name = "spulib",
-    version = "0.9.4",
+    version = "0.9.5",
     compatibility_level = 1,
 )
 

src/libspu/version.h

@@ -12,7 +12,7 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-#define SPU_VERSION "0.9.4"
+#define SPU_VERSION "0.9.5"
 
 #include <string_view>
 

version.bzl

@@ -12,4 +12,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-SPU_VERSION = "0.9.4"
+SPU_VERSION = "0.9.5"