chore(release): CLI 0.4.0 (#208)

0.3.0 has been the reported version through three merges that changed what the
vault can import: Bitwarden JSON read natively, then ids, timestamps, password
history and URI match rules preserved, then 1Password .1pux plus six more CSV
products and a --source that names a product rather than a file format.

install.sh reads the version straight out of packages/cli/package.json, so
`logicsrc --version` and install.json both said 0.3.0 on a build that already
carried all of it. Anyone checking a version to tell whether their CLI could read
a 1Password export got the wrong answer.

Only the CLI moves. @logicsrc/opencreds stays at 0.1.0 deliberately: its version
is hardcoded in three places and one of them is the GENERATOR stamp written into
every exported database, so bumping it changes a file-format field. That is worth
doing on its own terms, not as a side effect of making --version honest.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logicsrc/cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "LogicSRC CLI: every LogicSRC standard and tool as one command.",
   "type": "module",
   "main": "./dist/index.js",