v0.4.0

Deletions only. One tool-schema change; everything else is internal cleanup found by a repo-wide over-engineering audit.

Changes for callers

• search_forum.prefixes is removed. Its own description told you to skip it — the numeric prefix IDs were not discoverable from any tool, so the param could not be used correctly. Nothing else about search_forum changes: same rows, same filters, same truncated/lastPage semantics. If you were passing prefixes, it was being ignored in practice; drop it.

No other tool changes. get_thread, get_thread_images, list_threads, and list_forums are untouched, and output size is unchanged.

Internal

• The stale-cookie-jar reaper (a tmpdir scan on every import, reclaiming ~1KB files from crashed siblings) is replaced by a one-line exit handler that removes only its own jar.
• allowScripts dropped from package.json — it configured a tool that was never a dependency, and its esbuild@0.24.2 pin contradicted the declared ^0.24.0 range.
• getToken/sniffMime un-exported; neither had an external consumer.
• package-lock.json resynced (it had drifted a version behind).

Net −19/+7 lines in src/. Selftest passes in full against the live forum.