v0.4.0

Added

• pkg/litefake models the box's auth mode off (CONTRACT.md §A.2,
  expanded from the openccu-lite security documentation):
  Options.AuthOff and the knob Fake.SetAuthOff make
  GET /api/auth/v1/state answer every caller — any credential or
  none — with the fixed anonymous administrator session object
  carrying auth_off: true. Its identifier strings come from
  Options.AuthOffAccount / Options.AuthOffSID (defaults
  DefaultAuthOffAccount, DefaultAuthOffSID): litefake placeholders,
  since the contract does not fix the real box's values. Only the state
  answer is modelled; route authorization is unchanged, and the
  normal-mode answers carry no auth_off member.

Fixed

• pkg/litefake mints session ids in the box's shape — 26 characters
  of uppercase A-Z2-7 (CONTRACT.md §A.2, per the openccu-lite
  documentation). They were lowercased before, so a downstream
  shape check refused every litefake-minted id; caught by
  OpenCCU-Loom's box-shell SSO conformance test on its first run.

Changed

• README and DOCUMENTATION list LITE as the fourth backend mode: the
  fake openccu-lite box pkg/litefake serves, with its topology, its
  API surfaces, the CLI/library entry points and the CONTRACT.md
  provenance spelled out.