chore: release v0.4.1

[lostmygithubaccount]

Patch release — 14 merged PRs since v0.4.0 (2026-03-29). Bug fixes + hardening + tests + CI plumbing, no API changes → patch level.

Merged since v0.4.0

Hardening + validation:

• fix(core): replace unwrap() with error handling, add missing tests #9 fix(core): replace unwrap() with proper error handling and add missing tests
• fix(webapp): prevent TOCTOU race and use atomic writes #12 fix(webapp): prevent TOCTOU race in config mutation and use atomic writes
• fix(config): add empty URL and circular group validation #13 fix(config): add empty URL and circular group validation

Tests:

• test(webapp): add integration tests for REST API endpoints #14 test(webapp): add integration tests for REST API endpoints
• chore: update Cargo.lock for webapp test deps #15 chore: update Cargo.lock for new dev dependencies

Refactor / polish:

• refactor: extract HTMX URL to module-level constant #11 refactor: extract HTMX URL to module-level constant
• fix: add .pytest_cache to .gitignore #10 fix: add .pytest_cache to .gitignore

CI / infra:

• fix: release workflow checkout refs + cache cleanup #3 fix: add checkout ref to release workflows + remove target cache
• update install instructions for consistency #4 update install instructions for consistency
• fix: use dkdc.io email for dkdc-io org #5 fix: use dkdc.io email for dkdc-io org
• fix: add contents:read to release-rust permissions #6 fix: add contents:read to release-rust publish job permissions
• chore(ci): migrate to org reusable workflows #7 chore(ci): migrate to org reusable workflows
• fix(ci): add local PyPI publish step #8 fix(ci): add local PyPI publish step
• chore: update dependencies #16 chore: update dependencies

Why patch

All changes are bug fixes, tests, CI plumbing, or non-breaking refactors. No API surface added or removed; webapp-config mutations keep the same shape (atomic-write is an internal change; TOCTOU fix is observably a correctness fix).

Gate

./bin/check green (rust + python).

DO NOT MERGE — agent0 drives merges + tags + publish.

🤖 Generated with Claude Code