Release 0.4.0

- compliance encryption: iOS App Encryption / export-compliance gate
- legal: Play Data Safety ephemeral + per-action purposes; service-provider
  SDKs marked collected-not-shared; legal generate --only
- doctor: validates encryption.json / iap.json / metadata field lengths
- --version reads from package.json; listing exits non-zero on limit violations