v0.4.1 — vision alignment and release hardening

Org Studio v0.4.1

This maintenance release aligns the repository with the approved 2026-07-16
product direction and hardens the continuing 0.x release line.

Highlights

• Focuses Org Studio on persistent, named OpenClaw and Hermes teams in trusted
  self-hosted environments.
• Synchronizes the checked-in vision with the live vision and adds a scheduled
  drift check.
• Records the Materialyze transfer inventory and equivalence gates. No
  Materialyze-bound prototype code is deleted before transfer.
• Keeps file mode as the zero-database local start and PostgreSQL as the
  durable multi-user option.
• Replaces new unsalted SHA-256 password records with salted scrypt and
  transparently upgrades legacy records after successful login.
• Binds the custom server to loopback by default and refuses unauthenticated
  non-loopback startup unless the isolated-network escape hatch is explicit.
• Defaults PostgreSQL workspace enforcement to strict.
• Updates Next.js, ws, and transitive dependencies; npm audit reports zero
  vulnerabilities.
• Adds macOS tests, Docker build, dependency audit, and stable aggregate
  required checks to CI.
• Fixes macOS Bash 3.2 skill synchronization and incorporates the useful
  maintenance changes from former PRs #83, #86, #88, and #89.

Validation

• 112 test files passed
• 1,479 tests passed; 1 skipped
• TypeScript and production build passed
• Ubuntu and macOS CI passed
• Docker image build passed
• Version and live-vision checks passed
• Full dependency audit passed with zero vulnerabilities

Product boundary

Worker runtime, direct coding engines, provisioning, HostProfile,
RepoContextPack, planner, model-tier routing, receipts/worker scorecards, and
runtime-independent messaging remain transitional. Their transfer-first plan
is documented in
docs/decisions/2026-07-16-materialyze-separation.md.

Full changelog: v0.4.0...v0.4.1