v0.4.1

What's Changed

• chore: release v0.4.0 by @eliothedeman in #282
• feat: Vendor brush as crates within clash workspace by @eliothedeman in #283
• test(policy): add unit tests for policy eval and sandbox paths by @eliothedeman in #285
• refactor(policy): unify path resolution into PathResolver by @eliothedeman in #286
• refactor(display): deduplicate user-facing formatting patterns by @eliothedeman in #287
• refactor(settings): extract policy loader module by @eliothedeman in #289
• cleanup: ignore worktrees made by claude by @eliothedeman in #290
• feat(policy): compile-time sandbox validation and platform warnings by @eliothedeman in #288
• fix(starlark): compile deny rules into sandbox fs rules by @eliothedeman in #291
• fix: Base sandbox on macos now allows reading from root but not Users by @eliothedeman in #292

Full Changelog: v0.4.0...v0.4.1