v0.40.0

What's Changed

• feat(install-global): wire security gates for lpm install -g (Phase 68) by @tolgaergin in #46
• refactor(cli): retire lpm store gc + lpm store list, route reachability cleanup through lpm cache prune by @tolgaergin in #47
• Phase 46 audit follow-up: fix top-5000 FP-reds, widen reserved-basename rule by @tolgaergin in #48
• Phase 46 Part B: L1-3 portable triage harness + L4 advisor (claude-cli / codex / ollama) by @tolgaergin in #49
• fix(bench): top-N audit slot-collision race under PARALLEL>1 by @tolgaergin in #52
• Phase 46b — triage-layer UX levers (#6 cache, #1 repo URL, #4 L1 widening, #3 embed install.js) by @tolgaergin in #51
• phase 46.2: Windows sandbox backend (Mandatory Integrity Control + Job Object) by @tolgaergin in #53
• phase 46.3 PR-1: close S1 reparse-point gap (root refusal + walk skip) by @tolgaergin in #54

Full Changelog: v0.39.0...v0.40.0