chore(main): release 0.4.0

[github-actions]

🤖 I have created a release beep boop

0.4.0 (2026-09-29)

⚠ BREAKING CHANGES

• os_bootstrap: the os_bootstrap_role inventory override is removed and now ignored, and os_bootstrap no longer reads platform, ansible_facts.os_family, ansible_shell_type or ansible_connection to decide the OS. The redhat_rocky_8 package list no longer ensures python3-libselinux.

Features

• credential_resolver,domain_member: own the first-boot wait, the launch password and the post-restart identity (#129) [audited 0968da2] (74edb7e)
• credential_resolver: try ordered credential sets once and keep the first that works (#122) [audited a5994d0] (5701b7f)
• framework: select the connection identity per play, before and after the join (#118) (c3b6652)
• read the disk managers' platform from the host when none is declared (#126) [audited e48b643] (f289616)

Bug Fixes

• openvpn_client: install the tunnel driver Server 2019 can run (#128) [audited 34dfc17] (8df5615)
• os_bootstrap: route each host to its own release's role [audited 6c4a396] (0435e7f)
• windows_disk_manager: move kept disks to their letters before provisioning (#121) (3fc34af)

Code Refactoring

• os_bootstrap: select in one stage, include in another [audited 6374f1e] (4ceb9f8)

Miscellaneous

• deps-dev: update dependency ansible-core to >=2.21.4,<2.22 (#123) (a14481b)
• deps-dev: update dependency microsoft.ad to v1.12.1 (#124) (685f4c2)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v0.4.0

🌻