Release Guardex under a fresh patch version (#444)

The npm registry is already at 7.0.39, so the next release lane needs a fresh package version and README release notes before creating the GitHub release. This keeps the release-only diff limited to package metadata and notes.

Constraint: npm registry reports @imdeadpool/guardex at 7.0.39\nRejected: Runtime code changes | user asked for version and release only\nConfidence: high\nScope-risk: narrow\nDirective: Keep release-only lanes limited to package metadata and README release notes unless verification finds a packaging blocker.\nTested: npm view @imdeadpool/guardex version\nTested: gh release view v7.0.39 --repo recodeee/gitguardex --json tagName,name,url,publishedAt,isDraft,isPrerelease\nTested: node -p package/package-lock version check\nTested: node --check bin/multiagent-safety.js\nTested: node --test test/release.test.js\nTested: node --test --test-name-pattern "README release notes include current package version|README documents gx release" test/metadata.test.js\nTested: NPM_CONFIG_CACHE=/tmp/guardex-npm-cache-7-0-40 npm pack --dry-run\nTested: openspec validate --specs\nNot-tested: npm publish; user requested npm version bump plus GitHub release

Co-authored-by: NagyVikt <nagy.viktordp@gmail.com>

Author: NagyVikt

README.md

@@ -265,6 +265,12 @@ Being honest about where this still has issues:
 <details open>
 <summary><strong>v7.x</strong></summary>
 
+### v7.0.40
+- Bumped `@imdeadpool/guardex` from `7.0.39` to `7.0.40` so the current
+  `main` payload can publish under a fresh npm version after `7.0.39` reached
+  the registry.
+- No new CLI command behavior is introduced in this release lane.
+
 ### v7.0.39
 - Bumped `@imdeadpool/guardex` from `7.0.38` to `7.0.39` so the current
   `main` payload can publish under a fresh npm version after `7.0.38` reached

openspec/changes/agent-codex-bump-guardex-to-7-0-40-release-2026-04-28-01-13/.openspec.yaml

@@ -0,0 +1,3 @@
+id: agent-codex-bump-guardex-to-7-0-40-release-2026-04-28-01-13
+tier: T1
+kind: notes

openspec/changes/agent-codex-bump-guardex-to-7-0-40-release-2026-04-28-01-13/notes.md

@@ -0,0 +1,10 @@
+## Change
+
+- Bump `@imdeadpool/guardex` from `7.0.39` to `7.0.40`.
+- Add README release notes for `v7.0.40`.
+- After merge, create/update the GitHub release `v7.0.40` from README notes.
+
+## Verification
+
+- `npm view @imdeadpool/guardex version` reported `7.0.39` before the bump.
+- `gh release view v7.0.39 --repo recodeee/gitguardex --json tagName,name,url,publishedAt,isDraft,isPrerelease` confirmed the previous GitHub release exists.

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@imdeadpool/guardex",
-  "version": "7.0.39",
+  "version": "7.0.40",
   "description": "Guardian T-Rex for your multi-agent repo. Isolated worktrees, file locks, and PR-only merges stop parallel Codex & Claude agents from overwriting each other's work. Auto-wires Oh My Codex, Oh My Claude, OpenSpec, and Caveman.",
   "license": "MIT",
   "preferGlobal": true,