deps: auto-pin action-mirror → v0.4.0

[bhyi4]

🤖 자동 초안 — action-mirror 핀을 최신 릴리스 v0.4.0로 따라잡습니다.

• 이전: v0.3.0 @ d59ea1df4643
• 이후: v0.4.0 @ 22eb4c5b0957

봇은 이미 존재하는 릴리스 태그로만 올립니다(태그 생성=사람). CI가 test_pins_are_releases(핀 SHA==태그 커밋)와 픽스처 설치(CP5)를 검증합니다.
자동 머지 안 함 — 검토 후 대장님이 머지.

🤖 Generated with Claude Code

[bhyi4]

Closing as predicted, not as rejected — the change this PR wants is still needed.

#42 (measure-mirror → v0.40.0) merged first, and both pin bumps touch adjacent lines of the same dependencies block in pyproject.toml. This PR's diff carries the old measure-mirror v0.39.0 line as unchanged context, so it went CONFLICTING the moment #42 landed. That was called out as the expected cost before either merge.

House rule from 2026-08-14: on this kind of conflict, do not force-merge — close and let the pin bot re-draft against current main. A force-merge here would silently reinstate the older measure-mirror pin from this branch's stale context.

The target is unchanged: action-mirror → 22eb4c5b09578f443b59d12a8455c5493b6064ed (v0.4.0). The pin watcher will re-draft it.