Release Compass 0.4.1

[forhappy]

Summary

• Bump Compass workspace packages and the VS Code package to 0.4.1.
• Promote the current unreleased changelog entries to the 0.4.1 release section.
• Update Cargo lockfiles and the code-graph qualification producer version.

Release note highlights

• Improve natural-language discovery with bounded business-vocabulary matching, witnessed Markdown-to-code links, and optional offline corpus-LSA candidates.
• Strengthen Python call, impact, and typed graph-query behavior while keeping ambiguity explicit.
• Expand impact relationships and add relation filters, direct/transitive file grouping, and 800-token natural-discovery pages.

Validation

• cargo metadata --no-deps, cargo check --workspace --all-targets --locked, cargo fmt --all -- --check, and cargo clippy --workspace --lib --bins --locked -- -D warnings
• cargo test --workspace --lib --bins --locked and cargo test -p compass-cli --test compass_product --locked
• sh scripts/check_product_boundary.sh, sh scripts/test_release_scripts.sh, and ./scripts/qualify_code_graph_v1.sh --fixtures-only
• npm ci, npm run typecheck:js, npm run test:js, and node scripts/check_viewer_assets.mjs

The release notes are prepared in the versioned changelog, with installation commands and artifact provenance details. npm ci reported 17 dependency advisories (1 low, 7 moderate, 8 high, 1 critical).