GCP v10.0: Upgrade pulumi/templates and pulumi/templates-policy

[pose]

Move every GCP template to v10.0.0 so pulumi new and pulumi policy new produce v10 projects.

Acceptance criteria

• pulumi new on a GCP template installs a 10.x provider.
• All 27 GCP-pinning files in pulumi/templates on v10, including the five go.mod files that generate-go-mod.sh does not touch.
• gcp-java/pom.xml uses an exclusive upper bound, [10.0.0,11.0).
• All 3 GCP-pinning files in pulumi/templates-policy on v10.
• pulumi new run for every GCP template in every language, with pulumi up succeeding on each.
• pulumi policy new run for every GCP policy template.
• pulumi/compliance-policies vendor-google bumped, or an issue filed and the dependent google-{cis,iso27001,pcidss}-* templates recorded as still on the older major.