fix: updated core dependency to 0.4.0

[alyldas]

Summary

• Update the @textfilters/core dependency range to ^0.4.0.
• Regenerate the package lock against the published core 0.4.0 package.
• Preserve package runtime behavior and public APIs while adopting the current shared contract release.

Validation

• npm ci with a temporary npm cache
• npm run check
• npm run benchmark:profanity
• npm pack --dry-run
• npm ls @textfilters/core --depth=0

Benchmark Evidence

Baseline origin/main:

• scanner scan short match: 0.0331 avg ms
• censor short match: 0.0324 avg ms

This branch:

• scanner scan short match: 0.0323 avg ms
• censor short match: 0.0319 avg ms

The additive core 0.4.0 aliases do not change package runtime behavior, and no benchmark regression was observed.

Compatibility Notes

• Public APIs are unchanged.
• Existing filter factories, dictionary APIs, exports, and scanner contract names remain compatible.
• The core dependency floor moves to ^0.4.0; release workflows, permissions, and required secrets are unchanged.

Closes #156

No publish, no merge, no tag/release.