codetopo-acp 0.4.0

Feature release for the ACP agent only: codetopo-acp 0.4.0 is on crates.io; the other six crates remain at 0.3.3. Release binaries for codetopo-acp (linux/macOS/Windows) are attached to this release.

• codetopo-acp 0.4.0 — ACP Terminal Auth (trust setup): the agent now advertises one terminal auth method, codetopo-trust-setup, until setup is recorded (and only to clients declaring terminal-auth support, per the spec). codetopo-acp login provisions the HMAC proof-verification key locally (0600, hidden entry; keyless setup offered) — codetopo has no accounts, and the one secret in its trust model is that key. Snapshots the agent takes are signed when a key is provisioned, and answers cite the certificate serial and signer fingerprint. Design: docs/acp-trust-setup.md. Other crates unchanged at 0.3.3.