Add tinyland-auth 0.4.0 + tinyland-fingerprint 0.3.0 (TIN-2435 / TIN-1744)

[Jess Sullivan (Jesssullivan)]

Operator-approved release cuts (2026-07-04, A3 GO).

tummycrypt_tinyland_auth 0.4.0

• Tag: tinyland-inc/tinyland-auth v0.4.0 @ 788f8ab1 (MODULE.bazel pre-bumped 0.3.3→0.4.0 on main)
• Two-axis RBAC SSOT (TIN-2435): ROLE_CHARTER, MEMBER_SELF_SERVICE_CORE, FEATURE_DOMAINS; P2 view-grant reconciliation; predicates derived from ROLE_PERMISSIONS; P1/P2/P3 exhaustive invariant tests
• Integrity computed from the actual tag archive (95,878 bytes): sha256-LLdxUJ7PAAowncke89Ipe6iANl6NHLw+/k/QUBxEay4=

tummycrypt_tinyland_fingerprint 0.3.0

• Tag: tinyland-inc/tinyland-fingerprint v0.3.0 @ 2d51b9af (versions already consistent on main)
• TIN-1744 vendored-surface port; operator ratified KEEP on all three 0.3.0 behavior changes (retry 10→1, Tempo-primary history, dataSource narrowing) — already live behavior in the mothership's vendored copy; zero current registry consumers
• Integrity computed from the actual tag archive (71,840 bytes): sha256-QeGYB9V4pBp4vGxK2DSX9GbY+YL8RiB6SAbIY525Pl4=

MODULE.bazel files are verbatim from the tagged sources. validate-registry.mjs passed locally (131 entries). Placeholder-grep guard clean.