fj: bump to v0.4.0

Audit-driven hardening release. Highlights:
- BREAKING: --json=fields removed; use --json-fields fields
- New: fj api --json/--json-fields/--jq/--paginate
- Security: fj api endpoint path-traversal closed, body bounded at 64MB,
  HTTP timeout (was unbounded)
- Fixed: --config silently ignored, --json broken on run/workflow/wiki view
- Refactor: actions/aliases command trees share factory functions
See https://forgejo.zerova.net/public/fj/releases/tag/v0.4.0

Formula/fj.rb

@@ -4,8 +4,8 @@ class Fj < Formula
   license "MIT"
 
   url "ssh://git@forgejo.zerova.net/public/fj.git",
-      tag:      "v0.3.2",
-      revision: "25868adcad2af584b34032ebd034c4a070baaa43"
+      tag:      "v0.4.0",
+      revision: "0069198ca6cc9aa30717fb2519e3d34b3bbd70db"
   head "ssh://git@forgejo.zerova.net/public/fj.git", branch: "main"
 
   depends_on "go" => :build
@@ -24,6 +24,6 @@ class Fj < Formula
   end
 
   test do
-    assert_match "0.3.2", shell_output("#{bin}/fj --version")
+    assert_match "0.4.0", shell_output("#{bin}/fj --version")
   end
 end