Release v4.188.4

Fixed

• The semantic sandbox no longer refuses a whole application because it contains public events, foreign events or Translate slices. Local commands and queries run, public events are published into the sandbox's own event log only, foreign events arrive through seeds, and each rendered-around artifact appears as a renderedAround entry on /stage/semantic/admission with a startup warning. A restart over a log that holds published events is refused with an explicit message; start a fresh session (#655)
• /stage/scene, /stage/routes and /stage/locales stay available when the host is in refused mode, so the browser shows the refusal instead of "Unable to render this Stage — 404" (#655)