v0.4.0

Changelog

• 7da6480: HOR-364 — DRY the password prompter (overlay token + secrets share one) (@nunocgoncalves)
• 36978f6: HOR-364 — fix e2e-secrets: kustomization.yaml needs resources: [] (@nunocgoncalves)
• 1f13815: HOR-364 — forge secret-sync e2e + Makefile/workflows (@nunocgoncalves)
• 52f243b: HOR-364 — forge secret-sync phase (overlay-declared secrets; core + unit tests) (@nunocgoncalves)
• 211f910: HOR-364 — secret value resolution: env-or-prompt (mirror overlay GH token) (@nunocgoncalves)