Release v3.8.40

v3.8.40 cycle integration → main. All test gates green (Unit/Integration/Coverage/Node-compat/Quality-Ratchet). The only red check, 'PR Test Policy', is the test-masking heuristic firing on the cumulative ~57-commit release diff (legitimate assert consolidations already reviewed per-PR — Gemini CLI removal #5246, retired GPT models #5280, provider catalog refreshes); overridden with --admin per the documented release-PR convention. CodeQL/SonarQube advisory scans non-blocking; #5278's code already passed CodeQL on main. Homologated on VPS 192.168.0.15 (v3.8.40 healthy).

electron/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "omniroute-desktop",
-  "version": "3.8.39",
+  "version": "3.8.40",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omniroute-desktop",
-      "version": "3.8.39",
+      "version": "3.8.40",
       "license": "MIT",
       "dependencies": {
         "electron-updater": "^6.8.9"

electron/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omniroute-desktop",
-  "version": "3.8.39",
+  "version": "3.8.40",
   "description": "OmniRoute Desktop Application",
   "main": "main.js",
   "author": {