v0.4.1

Added

• Python 3.14 is now tested in CI and declared in the package classifiers.

Changed

• simplejson is now allowed up to (but excluding) 5.0; simplejson 4.x keeps the Python-level
  API unchanged and passes the full suite.
• The hatchling build backend is bounded to >=1.32,<2 so builds are reproducible across
  metadata-version changes.
• Locked development and documentation dependencies were refreshed (including the
  cryptography, pymdown-extensions, and setuptools security updates), and every workflow
  now uses astral-sh/setup-uv v10.0.1.

Fixed

• Documentation corrected against the 0.4.0 source after a full claim audit: manual log_on()
  installs a refresh callable, the 401/ErrorCode-4011 authentication replay applies to every
  endpoint while transport/5xx/429 retries stay idempotency-gated, retry_budget_seconds is a
  pre-sleep admission check, the stop-limit order recipe validates, and several scope claims
  (exception hierarchy, secret masking, DTO naming, Pydantic coverage) are now precise.