v0.4.0

Changelog

• 4e42497 build(desktop): packaging assets — real bundle ID, windows icon.ico/info.json
• ff45ac1 build(release): tag-triggered pipeline — CLI (goreleaser) + desktop dmg/NSIS + homebrew cask template
• 97fa4a7 feat(app): Options.Middleware — embedder hook to wrap the HTTP handler
• 627729f feat(app): manual update banner — /api/update compares against GitHub Releases (D13)
• 6fe7e0d feat(desktop): Wails v2 shell — loopback core, OAuth via system browser (D13)
• 369f99a feat(desktop): quit guard — confirm before closing over active transfers
• 7c5f5a6 feat(server): loopback Host guard — DNS-rebinding defense for local mode
• fc33576 fix(release): export NSIS into PATH via GITHUB_PATH — choco edits don't reach later steps
• 2d76528 fix(release): install NSIS via choco — not preinstalled on windows runners
• 503afd1 fix(release): wails build needs -nsis to produce the installer; fail loudly when makensis is missing
• c849b94 refactor: web entrypoint → cmd/web (desktop shell lands in desktop/)
• 1c4b3eb release(desktop): v0.4.0 — numeric-only versions; NSIS VIFileVersion rejects prerelease suffixes
• 9a837ef release(desktop): v0.4.0-beta.1 — README desktop install, D12 reconfirmation