v0.4.0

Changelog

• f6401f5 feat(web): reveal import password input only when chosen file is encrypted
• 22f4ae1 feat(web,core): share import merge; add /api/import, bulk delete, step-up password
• d728abf fix(otpauth): accept label with empty account on import