v2.40.2 — wrangler 4.156.0 clears the undici advisories

Drop-in patch. No new env vars, no migrations, no Worker code change.

chore:

• wrangler 4.156.0, which pulls undici 7.30.1 and clears four undici advisories (GHSA-4w7w-5xrc-9h26, GHSA-2m5v-pch6-74hx, GHSA-qrxm-fqhp-jwvm, GHSA-9fm3-97px-rjf6). These affect the local deploy tooling only, not the Worker bundle. Run npm ci after upgrading so your checkout picks it up (#218).

If you skipped v2.40.1, read its notes too: it fixes the Confirm and Unsubscribe buttons on the emailed subscription pages.