v0.4.0

api: expose guest exec and an attach stream over the http api (827b2a7)
cli: add environment exec and environment shell (04b2b60)
fork: implement firecracker environment fork end to end (fab5dfa)
fork: implement firecracker environment fork end to end (a564a8a)
host-agent: add a pty attach endpoint and honour exec timeouts (77a2353)
host-agent: bootstrap command for one-command host bring-up and self-registration (e0e00c6)
host-agent: probe real capacity instead of trusting operator flags (8ffaf46)
orchestrator: give Environment.Exec a faithful result and add an Attacher capability (76a38ea)
probe host capacity from the agent instead of trusting operator-declared flags (916cd65)
sdk/go: add Environments.Exec and an attach stream client (c32a299)
sdk: add exec to the typescript and python sdks (96dae3b)
vms: exec (355aa71)

api: reject an attach without tty=1 with a 400 instead of a 500 (fa69107)
avoid stale page-cache corruption on fc-agent snapshot restore (faa7340)
avoid stale page-cache corruption on fc-agent snapshot restore (2c0732f)
exec: let a long guest command outlive both 60s http ceilings (b9bc805)
host-agent: clamp oversized resize and preserve empty argv elements (ebe1413)
host-agent: guard path components inline so codeql sees the sanitizer (0d1bc92)
host-agent: inline path-component guard at each call site for codeql (4183e21)
host-agent: realpath containment guard for image and snapshot paths (a39dbee)
host-agent: reject path traversal in image and snapshot names (89d3602)
host-agent: simplify image containment guard to match snapshot guard (e695bf8)
host-agent: validate path components with allowlist to satisfy codeql (0b72b8e)
resolve blank page content caused by tabMode top grid collision, fix app branding (7fbde14)
stage the missed Exec-signature fix and pin do_attach’s execvp path to SSH_BASE[0] for codeql (054284a)
stop rootfs bake dying silently at e2fsck and unwedge agent rebuilds (1ea3e30)
stop rootfs bake dying silently at e2fsck and unwedge agent rebuilds (7b951e4)