v0.4.0

Changelog

• d0f3f84: chore: require Go 1.26.10 for stdlib security fixes (@cloudapp3)
• c0c3f80: feat: add opt-in MCP write tools for forwarding rules (@cloudapp3)
• 75540cf: feat: harden quota persistence with write-behind flush (@cloudapp3)
• f8674a1: feat: surface unknown config keys and detect forwarding loops (@cloudapp3)
• 0dce6a3: fix: mask bot secrets from anonymous management callers (@cloudapp3)