Release 0.4.0 #33

Ship @corbits/system-one 0.4.0.

The public API grew (custom endpoint auth opt-out, keyed decisions with image assets, and Clairic extraction), so this is a minor bump from 0.3.2 rather than a patch.

Stack the open feature work from #30, #31, and #32 onto one release branch. Do not merge those feature pulls themselves.