v0.4.0

Changed

• The app lock now waits 30 minutes by default before asking again, instead
  of 60 seconds, and the wait is a setting: every time you leave, 1, 5, 15, 30
  or 60 minutes, or only when the app starts. A minute was short enough that
  reading one linked page and coming back meant another fingerprint, which is
  friction without much security to show for it.

Changed

• Relicensed from MIT to GPL-3.0-or-later. The full licence text is in
  LICENSE and every source file carries an SPDX notice. All dependencies are
  Apache-2.0, which is compatible with GPL-3.0.