chore(release): v0.4.1

[snowmead]

Summary

Release prep for v0.4.1.

Version bumps

• oxcode-model, oxcode-core, oxcode-cli: 0.4.0 → 0.4.1 (incl. internal path-dep pins and Cargo.lock)
• npm/package.json and server.json (MCP Registry): 0.4.0 → 0.4.1
• Claude Code plugin (claude-plugin/.claude-plugin/plugin.json): 0.4.0 → 0.4.1

Patch release for commits since v0.4.0:

• fix(mcp): default omitted path to workspace, not process cwd/$HOME #41 — omitted MCP path defaults to the workspace (env / MCP roots), not process cwd/$HOME, so oxcode_watch no longer cold-indexes the home directory
• ci: append a "## Changes" commit list to each release #32 — append a ## Changes commit list to each GitHub Release
• docs(readme): document oxcode_watch (single-writer watcher) #31 — document oxcode_watch and the single-writer watcher
• chore(deps): bump actions/setup-node from 4 to 6 #33, chore(deps): bump actions/checkout from 6 to 7 #34 — Dependabot GitHub Actions bumps

What happens on tag

Once merged, pushing tag v0.4.1 triggers the Release workflow: builds binaries for all five targets, creates the GitHub release, publishes crates to crates.io, and publishes @snowmead/oxcode-mcp + the MCP Registry entry. The MCP server self-updates the installed binary to the new release on next startup.

Test plan

• just ci passes locally
• Version fields read 0.4.1 in crates, npm, server.json, and Claude plugin
• After merge + tag v0.4.1: GitHub release exists with artifacts; publish jobs succeed

[cursor]

Thermos review — no medium+ findings

Pure patch release (0.4.0 → 0.4.1). Security/correctness and code-quality passes both clear.

Verified lockstep:oxcode-model / oxcode-core / oxcode-cli package versions + path-dep pins, Cargo.lock, npm/package.json, server.json (top-level + packages[0].version), and claude-plugin/.claude-plugin/plugin.json all at 0.4.1. Publish-npm stamps from crates/oxcode-cli/Cargo.toml (aligned); publish-crates --locked order satisfied. No leftover oxcode 0.4.0 on release surfaces. Diff is version strings only — no logic, workflow, secret, or dependency-graph changes.

No prior unresolved automation threads. No inline findings.

_{Sent by Cursor Automation: Find vulnerabilities}