base-bash-libs v1.4.0

Added

• Added hierarchical log-category gates and log_is_enabled, allowing callers
  to control reusable-component diagnostics independently from terminal and
  persistent-sink verbosity.

Changed

• Assigned reusable-library records to base_bash_libs.<module> categories and
  defaulted the parent library gate to INFO, allowing application DEBUG output
  without implicitly enabling library DEBUG diagnostics.
• Added an optional BASE_CLI_PRIMARY_LOG diagnostic sink. Bash logging keeps
  terminal verbosity unchanged while persisting the DEBUG-level stream to the
  shared run primary log.
• Include the local numeric timezone offset in default structured log
  timestamps and an explicit UTC marker when LOG_UTC=1, keeping Bash log
  formatting aligned with Base's Python CLI logs.

Security

• Stopped emitting the caller's unredacted argument vector when wrapper
  diagnostics are enabled, preventing sensitive option and positional values
  from entering terminal or persistent logs.
• Hardened the primary diagnostic sink to reject unusable and non-regular
  targets, normalize new and existing log files to mode 0600, suppress
  best-effort write errors, and report only eligible sinks through
  log_is_enabled.

Deprecated

• Deprecated the Bash-only VERBOSE level, log_verbose* helpers, and
  --verbose-wrapper. Their 1.x behavior remains unchanged, with removal no
  earlier than the next major release; DEBUG is the most detailed level for
  new code.