v0.4.0

What's Changed

• ci(release): float the minor tag, and say which pin to use by @ivermin1123 in #45
• docs: give durable decisions a tracked home by @ivermin1123 in #46
• docs: say plainly that code scanning rejects our SARIF by @ivermin1123 in #48
• fix(snapshot): the $ref guard was hiding the findings it sits next to by @ivermin1123 in #51
• docs: close the book on schema-diff, and say who does it better by @ivermin1123 in #52
• docs(research): translate both research files to English by @ivermin1123 in #53
• docs: write out the typography that reads as machine-made by @ivermin1123 in #54
• docs: plain typography in the strings users read, and a scope boundary for snapshot --check by @ivermin1123 in #55
• fix(sarif): anchor findings to a real file so code scanning keeps them by @ivermin1123 in #56
• test(sarif): pin the anchoring, including the line it must not point at by @ivermin1123 in #57
• ci: name the canary job the comment points at by @ivermin1123 in #58
• chore(release): 0.4.0 by @ivermin1123 in #59

Full Changelog: v0.3.0...v0.4.0