chore: Prepare release 4.0.0

[rokt-releases]

Preparing for release 4.0.0

There should be 9 files that have been updated:

• plugin/package.json
• plugin/plugin.xml
• plugin/src/ios/CDVMParticle.m
• Kits/Rokt/package.json
• Kits/Rokt/plugin.xml
• Kits/RoktPaymentExtension/package.json
• Kits/RoktPaymentExtension/plugin.xml
• CHANGELOG.md
• VERSION

Additionally a dry-run publish was successfully run for the plugin, Rokt kit, and Rokt payment extension.

[cursor]

PR Summary

Low Risk
Version and changelog-only changes with no runtime behavior modifications in the diff.

Overview
Release 4.0.0 — bumps the monorepo and publishable packages from 3.0.1 to 4.0.0 across VERSION, @mparticle/cordova-sdk, @mparticle/cordova-rokt-kit, and @mparticle/cordova-rokt-payment-extension (package.json, plugin.xml, and matching lockfile version fields).

CHANGELOG.md now has a dated [4.0.0] - 2026-06-11 section (content that was under Unreleased) and updated GitHub compare links; Unreleased is empty again. iOS Cordova wrapper telemetry in CDVMParticle.m reports wrapper version 4.0.0 instead of 3.0.1.

There are no new APIs or native logic changes in this diff—only versioning and release notes packaging for the 4.0.0 line documented in the changelog (SDK bumps, payment kit rename, Rokt session/URL APIs, etc.).

^{Reviewed by Cursor Bugbot for commit c48684a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[jamesnrokt]

Closing this auto-generated release PR. It surfaced an inconsistency in the release workflow: the PR body claimed 9 files but npm version also legitimately updates lock files, and Kits/Rokt/package-lock.json was an empty, dependency-less lock file adding noise. Fixing the workflow + removing that cruft in a separate PR, after which the release will be re-run with a major bump.