v0.40.0

## Changelog
* 45f227c0b54742db967a4e320799788af8eb63a8 deps: bump @tanstack/react-router from 1.170.18 to 1.170.32 in /web (#403)
* 910c5dc11f42428001d425f7d08710b24cd70c67 deps: bump @vitejs/plugin-react from 6.0.3 to 6.1.1 in /web (#405)
* 2b42ca56217684da9282bcef8352a0c5fce7ceba deps: bump github.com/posthog/posthog-go from 1.24.0 to 1.24.4 (#396)
* aa99a344ca26fc70aad3c2e1b4530751fc1aff2a deps: bump golang from 1.27.0-alpine to 1.27.1-alpine (#397)
* 6a7a0532ed779701fe1dd906f1aa48628032610d deps: bump node from `aadf416` to `2d984a1` (#393)
* ef1c2023d4a298c7cf77c9d5537377f6511910a3 deps: bump react-dom and @types/react-dom in /web (#398)
* 8b2c4e9ee8ed974353eb8b699882c81cb1a8b816 deps: bump vite from 8.1.5 to 8.2.2 in /web (#402)
* f0cdface45da8f7eca07f737a03537be75f20a71 feat(skills): add per-vault Skills tab with markdown instructions (#391)
* bd1a325d79129644487f3e5b4f18c51adbc64638 fix(docs): vulnerability disclosure reporting (#392)
* 872578e4cdf9e03d5e3bcb5512023a70bf90ed65 fix(netguard): fall back across resolved addresses (#374)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.40.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
```