Bump version to 0.4.1 (security patch)

Security patch release — no API changes, no breaking behaviour.

Contains:
 - TRON rawDataHex verification before Ledger signing (MITM defence)
 - Feedback issue titles now neutralize @-mentions
 - RPC config errors no longer echo URLs (prevents API-key leak in logs)
 - vitest 2.x → 4.x (resolves GHSA-67mh-4wv8-2f99, dev-only)

See PR #30 for full details and Socket.dev triage.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: szhygulin

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "vaultpilot-mcp",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "mcpName": "io.github.szhygulin/vaultpilot-mcp",
   "description": "MCP server for AI agents (Claude Code, Claude Desktop, Cursor) to manage a self-custodial crypto portfolio through a Ledger hardware wallet. Reads on-chain wallet balances, ENS, token prices, and DeFi positions across Ethereum/Arbitrum/Polygon/Base (Aave V3, Compound V3, Morpho Blue, Uniswap V3 LP, Lido stETH, EigenLayer), surfaces liquidation/health-factor alerts and protocol risk scores, then prepares unsigned EVM transactions (supply, borrow, repay, withdraw, stake, unstake, native/ERC-20 send, and LiFi-routed swaps and cross-chain bridges) that the user signs on their Ledger device via WalletConnect — private keys never leave the hardware wallet.",
   "type": "module",

package.json

@@ -3,7 +3,7 @@
   "name": "io.github.szhygulin/vaultpilot-mcp",
   "title": "VaultPilot MCP",
   "description": "Self-custodial crypto portfolio: read EVM DeFi, sign on Ledger via WalletConnect.",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "websiteUrl": "https://github.com/szhygulin/vaultpilot-mcp",
   "repository": {
     "url": "https://github.com/szhygulin/vaultpilot-mcp",
@@ -14,7 +14,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "vaultpilot-mcp",
-      "version": "0.4.0",
+      "version": "0.4.1",
       "transport": { "type": "stdio" },
       "environmentVariables": [
         {