v0.4.0

Changelog

• 74abd68 release: v0.4.0 — MCP server, read tools, destructive grant (#11)
• ba05f7d docs: research note on a small model to drive Oriel's tools (#10)
• d7d4641 feat(ui): Settings automation-access panel to open/lock the destructive grant (#9)
• d810b4c feat(mcp): ship oriel mcp stdio server with destructive tools gated by grant (#8)
• cd679f1 feat(grant): time-boxed destructive-action window gated in Registry.Execute (#7)
• c382e24 fix(ui): update pill opens the confirm-update modal directly (#6)
• fc3be2c feat(tools): add read-only query tools to the registry (#5)
• cf6a8e7 ci(deps): bump pinned Actions to latest (goreleaser v7, pages v5/v6) + group dependabot updates
• adc0e50 feat(secrets): mask container env values in inspect; reveal policy + Settings
• 76bc155 docs: MCP-server-first roadmap + MCP server design doc