encryptor_ecto 0.4.0 reached Hex requiring encryptor 0.3.0, because it
was published before encryptor 0.4.0 was there to require. A consumer
on 0.4.0 therefore resolves the older vault and does not get encryptor
0.4.0's telemetry through this package. Main already carries the
corrected pin - `{:encryptor, "== 0.4.0"}` - so 0.4.1 exists to carry
that pin to Hex consumers.

@version moves to 0.4.1. changelog.d/ holds only its README - the
re-pin shipped no fragment - so the [0.4.1] section is written
directly, one Changed bullet, per changelog.d/README's at-release
paragraph. The encryptor pin itself is untouched: it is already correct
on main.

The README's install snippet is deliberately not moved, unlike the
0.3.0 and 0.4.0 preps. It now reads `{:encryptor_ecto, "~> 0.4.0"}`,
which already admits 0.4.1 and matches the exact-minor form the
pre-1.0 banner recommends.

There is no tag and no publish here. Both are the operator's.