Release v0.4.0

[sionsmith]

Summary

• Releases the reviewed and merged set from Update keyring items in place instead of delete-and-recreate #56, Send prompt=select_account on browser login #57, Add TEAMS_CLI_PROFILE and stop shadowing the "default" profile #58, Handle broken stdout pipes without panicking #60, Document macOS keychain prompts and update the AGENTS.md auth command list #61, Support reactions on chat messages #63, Support editing chat messages with message update #64, plus dependency PRs deps: bump the rust-minor group across 1 directory with 11 updates #49 and ci: bump the github-actions group across 1 directory with 3 updates #50, as v0.4.0.
• Adds TEAMS_CLI_PROFILE, --chat support for message react/unreact/update, and reactions in message output.
• Changes browser login to prompt=select_account; reactions move to Graph v1.0 and translate names to the unicode characters Graph requires on writes.
• Fixes the --profile default shadowing bug, keychain item recreation on every token write (macOS "Always Allow" loss), broken-pipe panics, and message update parse failures on a successful edit.
• Dependency refresh (rust-minor group) with h2 0.4.16 for RUSTSEC-2026-0258; GitHub Actions pins bumped.

Local verification (macOS, release binary)

• cargo fmt -- --check, cargo check --all-targets --all-features, cargo clippy --all-targets --all-features -- -D warnings
• cargo test --all-targets --all-features (152 unit tests, 64 CLI tests)
• cargo build --release --locked → teams 0.4.0
• cargo audit exits 0; one allowed transitive warning remains: RUSTSEC-2026-0097 for rand via reqwest/quinn
• mandoc -T lint on all man pages, git diff --check

Live validation (OSO profile, 2026-08-19)

• Read-only: auth doctor, auth status, user me, team list, chat list, message list --chat (reactions field present), TEAMS_CLI_PROFILE selection, completions | head exits 0 silently.
• Writes in a self-only sandbox chat: message send --chat, message react --chat like → 👍 "Like", react eyes → 👀, unreact, message update --chat edits and reads back, no beta warning on stderr.
• Keychain item creation date unchanged across a silent token refresh (in-place update).

Release notes

Feature release (minor bump 0.3.0 → 0.4.0). After merge, auto-tag.yml should tag v0.4.0 and release.yml should build all five targets, publish the GitHub Release with checksums, and update the Homebrew tap and Scoop bucket.