release: 0.4.0, agents use the CLI and every decision is a card

[krishhgg]

Bumps the version to 0.4.0 in Cargo.toml, the CLI's dependency on tokenstash-core, Cargo.lock and the npm package with its four platform packages. The changelog's Unreleased section becomes 0.4.0, with the biggest changes first: agents use the CLI through one skill, every decision is a card, the inbox opens over Tailscale, and the fix for a replaced key coming back on Linux.

After this merges, the plan is a v0.4.0-rc.1 tag first. It publishes a pre-release to npm (next) and PyPI and skips crates.io and Homebrew, which checks the npm token and PyPI trusted publishing before v0.4.0 itself.

Confidence Score: 5/5

This release-only change appears safe to merge.

What we checked:

• Rust packages stay in sync: Both crates inherit the workspace version, and the CLI now requests the matching core version. Existing tests check that these versions agree.
• Release candidate pins match: The npm script uses the tag version for platform packages and overwrites every launcher pin with that same version.

Summary

Prepares the 0.4.0 release without changing runtime code.

• Updates Rust package versions and all four npm platform pins together.
• Labels and reorders the existing release notes in CHANGELOG.md.
• The existing workflow supports the planned release candidate.

_{Reviews (1) · Last reviewed commit: "release: 0.4.0, agents use the CLI and e..."}