v0.4.0-rc.2

What's Changed

• Auto-mark prerelease GitHub Releases for -rc tags by @TheConnMan in #427
• Interactive TUI + keychain secrets: guided authed-MCP flow, with the github-issues example by @alexrao2000 in #431
• Declare aci-protocol dep on the dispatcher and smoke-test its image by @TheConnMan in #434
• Docs: arm approval gates with the fully-namespaced tool name by @TheConnMan in #433
• One-shot post-approval allowance at resume boot (#430) by @TheConnMan in #437

Full Changelog: v0.4.0-rc.1...v0.4.0-rc.2