v0.4.0

Changelog

• ec31794 Merge feature/pq-crypto: PQ crypto + local provider + test coverage
• d58910c Merge pull request #1 from LarsenClose/fix/release-workflow
• c946764 feat: implement post-quantum cryptography and standalone mode
• 3380127 feat: wire Go bridge and CLI for PQ crypto + local provider
• 5d3c50e fix: add G703 nosec annotation for SOPS_AGE_KEY_FILE path
• 8af4068 fix: add OCI labels to Dockerfile for GHCR auto-linking
• e20f976 fix: release workflow test failures and arm64 push permissions
• 7dd553f fix: use PAT for GHCR push in release workflow
• 15f06e0 perf: native arm64 runners + cache mounts for Docker builds
• 453a1ad security: harden genesis-core for production deployment (#20)