v0.4.0

Changelog

• 5eb6fd5 build(deps): update squoze to official v0.2.0 release and remove local replace
• 9060841 docs(roadmap): mark benchmarks and v0.3.0 release automation as done
• da2605d docs(security): point vulnerability reports to GitHub private advisories
• 28c6eb8 docs(unfinished): record v0.3.0 release automation closure
• d4fdf67 feat(gateway): add thinking_budget bounding and support role user squoze distillation
• 9a7b5f6 feat(proxy): integrate Squoze v2 context distillation engine with latency and telemetry headers
• f5fdb87 release: v0.4.0 — Squoze v2 streaming distillation, thinking budget and combat benchmarks