chore(main): release 0.4.0

[github-actions]

🤖 I have created a release beep boop

0.4.0 (2026-07-17)

Features

• cli: auto-register linear webhook and add av doctor (958bfad)
• config: auto-route issues to oma workflows and inject guidance (2b57cd4)
• config: wire max_parallel and add verify_command schema (f33e331)
• dashboard: bearer-token auth and mounted intervention ui (2593d89)
• observability: budget persistence, otel genai, ledger relay (77d8702)
• orchestrator: thread agent pid for crash-recovery reattach (414258d)
• orchestrator: verification gate, crash recovery, classified retry (38af8ff)
• security: sandbox credential isolation and injection spotlighting (8632373)
• sessions: add kimi (moonshot) as a supported vendor (d0f8966)
• sessions: add opencode as a supported vendor (c828d6b)
• sessions: os sandbox isolation with fail-closed default (4bc17cc)
• sessions: replace gemini with antigravity, cursor, grok adapters (b11e8bc)
• tracker: thread github delivery-id for precise webhook dedup (1d60037)
• tracker: timing-safe hmac and webhook replay dedup (87a49b3)

Bug Fixes

• config: reduce workflow-routing false positives (55a9806)
• workspace: non-destructive merge-conflict resolution (8d45efd)

Documentation

• document new config, env vars, and updated specs (6812d61)

---

This PR was generated with Release Please. See documentation.