release: v4.1.0

[vsits-proxy-builder]

Release-prep PR for v4.1.0. Two commits on the release branch:

• 6e24363 — release: v4.1.0 (CHANGELOG fold + version bump)
• 6841ef5 — docs(v4.1.0): align meter version floor to v0.7.0+ in README and usage-log header (Codex review follow-up)

Codex release review

Approved at 6e24363 via formal gh pr review workflow. Review artifact: docs/code-reviews/release-v4.1.0-codex-review-2026-06-10.md on branch consult/release-v4.1.0-codex-review.

Codex's verdict:

• Version bump correctly isolated to package.json (4.0.0 → 4.1.0)
• CHANGELOG [Unreleased] heading preserved; new [4.1.0] - 2026-06-10 entry covers all six merged commits since v4.0.0 with correct grouping (Added/Fixed/Documentation)
• Semver scope is right: three PRs add new env vars / opt-in features → minor is correct (not patch, not major)
• @nisqatsi credits present on Fix upstream url forming on forwardRequest #188, Pass authorization options from ENV to server/service #189, Implement server.mjs debug logging #190
• Tracked proxy/extensions.json is clean (no usage-log / rate-limit-log local mods would ship in the tarball)
• Cross-repo claim corrected to claude-meter >= v0.7.0 (meter 0.7.0 published to npm earlier today)
• One non-blocking attention item: pre-existing v0.5.0+ references in README and usage-log docstrings — addressed in commit 6841ef5 on this branch.

Scope (this release)

Six PRs since v4.0.0:

#	Type	Summary
#188	Fix	Preserve base-path component in upstream URL forming (@nisqatsi)
#189	Add	install-service threads auth options + systemd/plist escape hardening (@nisqatsi)
#190	Add	server.mjs debug logging with header redaction + async-rejection containment (@nisqatsi)
#138	Add	tools/cache_analysis.py reference helper (closes meter#22 part 1)
#208	Doc	Scrub npm token disclosure from public release-workflow.md
#210	Add	Optional request_id field on usage-log rows (cross-repo with meter v0.7.0)

Post-merge next steps

After this PR merges, Proxy Builder will:

1. Tag v4.1.0 on the merge commit and push
2. npm publish (per release-workflow.md step 8)
3. Create GitHub Release with the v4.1.0 CHANGELOG content
4. Confirm npm view claude-code-cache-fix version returns 4.1.0

— Proxy Builder