v1.4.0 — Bidirectional actuator feedback + QR + full UI

Actuators now talk back

D2-01-12 actuators (e.g. Ubiwizz UBID1507C) report their real state, and the integration listens: physical wall-switch toggles on directly-paired modules now sync switch/light entities (channel-filtered), exposed as d2_channel / d2_output_value / power-failure attributes. Validated in production on a live module.

Also in this release

• QR commissioning: paste an EnOcean Alliance product label (or AA:BB:CC:DD) in Configure → Add via QR code
• climate & sensor in the UI: full options-flow management, YAML field/bounds/unique_id parity — YAML can now be emptied entirely
• enocean_custom.send_teach_in: teach Eltako 4BS dimmers (A5-38-08) without DolphinView
• Delete protection: UI deletion refuses IDs still managed by YAML (including send-only YAML lights)

Review discipline

Two adversarial review rounds with executable repros: 5 findings reproduced and fixed (light channel arbitration, QR smuggling, yaml_managed bypass, forwarding rollback residue, bare-env CI guards). 60+ unittests, HA 2026.7.3 smoke, Ruff, CI 4/4.