Release 0.4.0

Added

• include_msg config option (default True) — controls whether the
  upstream Telegram collector is asked to include message text in each
  result (msg=true payload field). Set to False for metadata-only
  responses.
• include_text config option (default False) — when True, attaches
  the message text to each sighting pushed to Vulnerability-Lookup as
  the content field. Privacy guarantee: text is only attached
  for public channels (those whose t.me URL points at a Telegram
  username matching ^[A-Za-z][A-Za-z0-9_]{4,31}$). Messages from
  private channels — identified by a numeric chat_id in the URL,
  /c/<id>/... permalinks, +invite_hash invite links, or a missing
  channel field — are never sent regardless of the flag.

Changed

• Widened the pyvulnerabilitylookup dependency constraint from
  >=2.0.0,<3.0.0 to >=2.0.0,<5.0.0.

Fixed

• Python classifier list in pyproject.toml was duplicating
  Programming Language :: Python :: 3.12 three times; now correctly
  lists 3.10 through 3.14.