chore(main): release hve-core 4.0.0

[hve-core-release-please]

🤖 I have created a release beep boop

4.0.0 (2026-05-12)

⚠ BREAKING CHANGES

• agents: per-agent model selection for cost optimization and /compact loop fix (#1541)

✨ Features

• agents: add enablement dimension to Experiment Designer for code-with MVEs (#1416) (84077a8)
• agents: add Task Challenger adversarial questioning agent (#1315) (a9014c9)
• agents: optimize RPI agent context management with discipline rules (#1492) (35e5924)
• agents: per-agent model selection for cost optimization and /compact loop fix (#1541) (e158d88)
• prompts: add cspell-config prompt for automated spell check maintenance (#1516) (79db525)
• scripts: add lint:py:fix to apply ruff autofixes across Python skills (#1450) (2b6dca7)
• scripts: add structured JSON log output to Validate-Collections.ps1 (57ea279)
• scripts: add structured JSON log output to Validate-Marketplace.ps1 (#1430) (ec2aa53)
• skills: add 6 PowerPoint skill enhancements (#1481) (97c40e8)
• skills: add github-security code-scanning skill (#1418) (5bedf80)
• skills: add tts-voiceover skill for Azure Speech SDK voice-over generation (#1415) (c330c7a)
• skills: expand fuzz_has_formatting_variation to cover all formatting properties (#1143) (#1296) (d51b4d3)
• workflows: convert pr-review to manual /review slash command (#1544) (84e47f0)

🐛 Bug Fixes

• build: bump basic-ftp override to 6.0.1 to clear high-severity advisory (#1545) (4353df1)
• build: override ip-address to 10.2.0 for GHSA-v2v4-37r5-5v8g (#1539) (ba520aa)
• build: pin uuid and postcss via overrides to resolve Dependabot alerts (#1491) (af1f9ca)
• settings: remove markdownlint exclusion for collections/*.collection.md (#1372) (42cc137)

📚 Documentation

• improve new user onboarding with terminology, CLI plugins, and collections clarity (#1520) (66b524a)

🔧 Maintenance

• deps-dev: bump fast-uri from 3.1.0 to 3.1.2 (#1549) (7a2ee69)
• deps-dev: bump markdownlint-cli2 from 0.22.0 to 0.22.1 in the npm-dependencies group (#1452) (5440396)
• deps: bump fast-uri from 3.1.0 to 3.1.2 in /docs/docusaurus (#1548) (80fbddd)
• deps: bump the github-actions group with 3 updates (#1453) (a3ee84e)
• deps: bump urllib3 from 2.6.3 to 2.7.0 in /.github/skills/experimental/tts-voiceover (#1583) (8d3b095)

---

This PR was generated with Release Please. See documentation.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.49%. Comparing base (35e5924) to head (5fe1818).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1184      +/-   ##
==========================================
- Coverage   85.50%   85.49%   -0.01%     
==========================================
  Files          82       82              
  Lines       11805    11805              
==========================================
- Hits        10094    10093       -1     
- Misses       1711     1712       +1     

Flag	Coverage Δ
pester	83.65% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/hve-core	4.0.0	Unknown	Unknown

Scanned Files

• package.json