chore(release): 0.4.0

[kwent]

Summary

Bumps package.json and package-lock.json from 0.3.0 to 0.4.0 so the v0.4.0 tag passes the "Verify tag matches package version" step in publish.yml.

0.4.0 is a minor bump because the package is pre-1.0. It still contains breaking changes: #41 removed the AlertRetriggerRule* and BulkImport* endpoints and types because they're no longer in the published spec.

After merge, push an annotated v0.4.0 tag. That runs npm publish --provenance and publishes the Release Drafter draft with its OpenAPI diff.

Risk: low. Only the version number changes.

Link to Devin session: https://rootly.devinenterprise.com/sessions/af696ad13f4e47a09908c76ef0b67191
Open in Devin Desktop: https://rootly.devinenterprise.com/desktop/session/af696ad13f4e47a09908c76ef0b67191?variant=devin
Requested by: @kwent

[devin-ai-integration]

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

• Disable automatic comment, CI, and merge conflict monitoring