WRNexusJS 0.4.0

Package platform

Added automatic package plugin discovery from application dependencies and workspaces.
Added package-owned components, client runtimes, assets, styles, routes, middleware, database migrations, and DevToolbar panels.
Added duplicate/collision validation and strict discovery in development, build, doctor, and inspect flows.
Added production content-hashed client runtimes, content-addressed package asset storage with stable public URLs, and page-scoped runtime injection.
Added development bundling for TypeScript package runtimes and package-source HMR.
Added CSR package runtime mount/unmount lifecycle.

Added wrnexus inspect packages|plugins|routes|assets|runtimes|styles|migrations|bundle.
Added wrnexus generate system <name>.
Expanded production build reports with all route types, plugins, runtimes, assets, component directories, and package migrations.
Added the 0.4 application migration and release verification scripts.
Fixed duplicate historical migration IDs.

Removed manual captcha.js copying and script inclusion.
Removed duplicated CAPTCHA components from @wrnexus/ui and the showcase application.
CAPTCHA is now discovered from @wrnexus/captcha and injected only on pages that render it.
Preserved all challenge modes, audio, protected-page flow, validated form, compact/normal/big modes, Listen controls, not-robot mode, disturbance controls, and image-style renderers.

Every existing package received an exported advanced capability layer. See docs/PACKAGE-UPGRADES-0.4.md for the package-by-package inventory.

Package runtime and asset path collisions now fail before serving.
Production style processing fails closed by default.
Page ETags now include structured script metadata.
Package .wrn changes invalidate Tailwind output during HMR.
Package migrations use the same ordered migration contract as application migrations.