chore(release): prepare 0.4.0 scoped delivery observation #150

Scope

Prepare the unchanged four-feature0.4.0 milestone after user-authorized sequential merges #106 → #107 → #108 → #109. This tracks release preparation, not npm staging/publication approval.

• Preserve frozen handoff contract and public Python1.1.0 compatibility-source pins.
• Keep qualified exact Codex0.160.1/0.162.1 macOSarm64 client-ID observation and explicit operator_confirmed receipts; defer Linux/Windows observation and automatic producer/collector to feat(observation): qualify Linux Codex client-ID delivery observation #130/feat(observation): qualify Windows Codex handoff storage and delivery observation #131/feat(handoff): add explicit receipt producer and authenticated collector bootstrap #132.
• Include current-head review corrections, ordinary strictSSH/native-evidence/Windows exits and all prior dash/PID/SIGINT regressions.
• Version/package/current examples0.4.0; previousStable0.3.6 exact registry integrity; unchanged preview0.1.0-preview.1.
• Review explicit finite0.4.0skill matrix/default/undefined/outer inspector. Existing publicskill0.2.1pin stays; any proposed successor profile requires its exact full bytes/fixture/content review, not a guessed future range.
• Companion guidance candidate feat(relay): add authenticated WSS routing and hosted device enrollment #31/PR37 in session-peer-skill remains separately reviewed and separately published only after actual supporting runtime publication.
• Full build/types/tests, package/artifact/reproducibility/isolated install and all packagedMarkdown source comparison; current-head CI, CodeQL and automaticCode/Securityreviews.
• Prepare release notes and limitations. Source-specific staging, protected environment approval and final npm2FA belong to a later explicit publication approval. No operations/fleet/global installation or new real/native delivery experiments.

Registry read-only baseline2026-10-17: latest0.3.6 / preview0.1.0-preview.1. Previous integrity sha512-8uR9/x9q2AWp/zfJox0CMgm919M7kxpAjR2vGd/ntuS2AAwQh4ohbDmAtyxLyLoEE8IPsZVEbPKHCChvIJBuoQ==.