v1.4.0

What's Changed

• perf(hotpath): eliminate per-query allocations + protocol crash guards (G1/M1) by @danimoya in #26
• fix(pool): COPY-hang, poisoned-park, and pool-key identity leakage (G2/M2) by @danimoya in #27
• fix(stability): admin DoS caps, health-interval guard, pre-auth timeout (G4/M4) by @danimoya in #28
• fix(auth): event-driven auth relay — slow-client deadlock + ErrorResponse blindness (G3/M3) by @danimoya in #29
• fix(mem): bound the ha-tr journal and reclaim per-session L1 caches (G5/M5) by @danimoya in #30
• perf(pool): conditional reset — skip DISCARD ALL for provably-clean connections (G2c) by @danimoya in #31
• fix(relay): idle backend watch — LISTEN/NOTIFY delivery + kill the 200ms Flush stall (G3b) by @danimoya in #32
• fix(stability): session RAII guard + DashMap sessions, health-loop supervision (G4b) by @danimoya in #33
• fix(security): HTTP/MCP/GraphQL gateway request hardening (G-A1) by @danimoya in #34
• fix(security): refuse anonymous non-loopback admin; cap admin connections (G-A2) by @danimoya in #35
• feat(edge-proxy): two-region result cache with SSE invalidation push by @danimoya in #36
• docs(readme): edge-proxy demo GIF + asciinema link by @danimoya in #37

Full Changelog: v1.3.1...v1.4.0