v0.4.0

Changelog

• e7fcbb0 Merge pull request #22 from hrodrig/develop
• 6cd22f4 Merge pull request #23 from hrodrig/develop
• f71a9cf Merge pull request #24 from hrodrig/develop
• e51a124 ci(release): pin GoReleaser to ~2.16 instead of latest (I-2)
• 6f3b72e docs(blob): justify manager.Uploader nolint (I-3 reviewed, kept)
• 0204c27 feat(share): external share links — create/list/revoke + public /s/{token} (SHARE-01..03)
• ba7da32 fix(config): cookie Secure default true (B-10)
• 9177cda fix(gfs): loops use signal-aware context, not Background (B-13)
• 7988a9a fix(server): ingest internal error returns 500, not 400 (B-5)
• 27f4d5e fix(server): reject raw upload bodies that are not gzip (B-6)
• 7e38c2a fix: delete removes blob before row; GET .../delete 404s (B-14)
• 5b58d71 refactor(auth): drop dead EqualHash helper (B-9)
• cba8f6e release: v0.4.0 — external share links (Phase 9, SHARE-01..03)