v0.1.40

I'll inspect the actual diff since there are no commit subjects to work from.## Fixes

• appkit-mastra: Fix production crash when dispatching to the Mastra sub-app under an OBO token. The asUser(req) proxy wrapped the express app's .bind (which is express's HTTP BIND route registrar, not Function.prototype.bind), registering a bogus route and crashing pathToRegexp. Requests now route through a plain dispatchMastra method that invokes the express app off the real target while keeping the OBO user scope active for agent and model resolvers.