Update ctrf-cli for CTRF 0.1.0 and ctrf 0.4.0

[Ma11hewThomas]

Summary

• update ctrf-cli to 0.4.0 and pin the exact development-only ctrf dependency to 0.4.0
• support validation against latest and CTRF schema versions 0.0.1 through 0.1.0
• bundle and verify all five schemas, with byte-for-byte checks against ctrf and the authoritative core schema
• align examples and retry-history semantics with the released specification
• preserve standalone packaging: both aliases resolve to dist/cli.js and production installs contain no ctrf package

Verification

• npm ci and npm run all: 78/78 tests passed
• Node 20.19 minimum compatibility: passed
• packed-package smoke test: passed
• npm audit and npm audit --omit=dev: 0 vulnerabilities
• npm audit signatures: 103 signatures and 40 attestations verified with npm 11.7

The Node SEA prototype remains out of scope and unchanged.