v1.4.0

Adds the seventh guard-external-plugin-workflows skill, the Workflow Guard Planner and Opaque Workflow Checkpoint contracts, the complete 37-tool ChatGPT submission pack, and controlled Sidecar v1 acceptance evidence. All public modules remain free and real USDC settlement remains disabled. The new workflow tools require backend 0.6.0 or later.