🔖 Prepare v0.4.0 release

[Nick2bad4u]

Summary

• raise the package and lockfile version from 0.3.0 to 0.4.0
• regenerate the complete git-cliff changelog for the multi-service provider release
• preserve the existing OIDC trusted-publishing workflow with no npm token

Release impact

Minor: this release adds backward-compatible service filtering, provider metadata, CLI commands/options, package API exports/types, secure multi-provider previews, curated layouts, and gallery capabilities.

Verification

• npm run release:verify
• 7 test files and 52 tests passing
• coverage: statements 95.81%, branches 89.18%, functions 100%, lines 99.46%
• publint passes; ATTW ESM-only policy passes with configured CommonJS resolution ignore
• npm pack dry run includes provider declarations/runtime and the 81-layout library
• npm, Git tag, and GitHub Release namespace for 0.4.0 confirmed clear before preparation

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

@@           Coverage Diff           @@
##             main      #13   +/-   ##
=======================================
  Coverage   91.04%   91.04%           
=======================================
  Files           7        7           
  Lines         402      402           
  Branches      120      120           
=======================================
  Hits          366      366           
  Misses          2        2           
  Partials       34       34           

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 59f28c7...7533f8b. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 7533f8b934

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Point the release range at this commit's history

When this commit is tagged as v0.4.0, the advertised range and release entry point to 61ace9d, which is not an ancestor of the reviewed commit (git merge-base --is-ancestor 61ace9d 12810ce fails). Consequently, the v0.4.0 changelog links to an abandoned parallel release-preparation commit rather than the history actually being published, and it omits the reviewed changelog commit itself; regenerate the range from this commit's lineage or use the eventual release tag.

Useful? React with 👍 / 👎.