chore(release): bump opencode-oauth2 + bundle + workspace to 0.4.0

Minor release for the PKCE-on-device-code feature, the configurable `pkce`
opt-out, and the refresh-backed bearer propagation fix landed in #24.

- @vymalo/opencode-oauth2: 0.3.0 → 0.4.0
- @vymalo/opencode-oauth2-bundle (private): 0.3.0 → 0.4.0
- workspace root (private): 0.3.0 → 0.4.0

@vymalo/opencode-models-info stays at 0.1.0 — unchanged in #24.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: stephane-segning

package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-oauth2-workspace",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "private": true,
   "description": "Workspace for @vymalo/opencode-oauth2 — OAuth2/OIDC-secured OpenAI-compatible providers for OpenCode.",
   "packageManager": "pnpm@11.3.0",

packages/opencode-oauth2/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vymalo/opencode-oauth2",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "OpenCode plugin for OAuth2/OIDC-secured, OpenAI-compatible model providers with periodic model sync.",
   "license": "MIT",
   "author": "vymalo contributors",

packages/plugin-bundle/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vymalo/opencode-oauth2-bundle",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "private": true,
   "type": "module",
   "scripts": {