What's Changed

• chore(v0.4.0): foundation — deps, ArchUnit fix, LICENSE, pom metadata by @VirusAlex in #59
• fix(v0.4.0, security): NOFOLLOW_LINKS, acknowledgeOverwrite, token scope, browse-stats by @VirusAlex in #60
• fix(v0.4.0, resource limits): registry cleanup, body cap, SO_TIMEOUT, conn cap, posix perms by @VirusAlex in #61
• fix(v0.4.0): state schemaVersion + Docker HEALTHCHECK / multi-arch / SHA-pin by @VirusAlex in #62
• docs(v0.4.0): align README + frozen contract + protocol-comparison with reality by @VirusAlex in #63
• fix(docker): unignore target/release jars so release.yml + local builds work by @VirusAlex in #64

Full Changelog: v0.3.3...v0.4.0