3.40.3

(fix): Make OAuth authentication section a stable feature block in generated READMEs. Previously, the authentication documentation was injected as an addendum to the Usage block with a ## Authentication heading, which the BlockMerger parsed as a separate top-level block on subsequent merges. The authentication content is now registered as a proper AUTHENTICATION feature with a stable block ID, making README merges deterministic.

3.40.2

(fix): Patch minimatch to 10.2.3 in container to fix GHSA-7r86-cg39-jmmj (ReDoS via combinatorial backtracking in matchOne()) and GHSA-23c5-xmqv-rm74 (ReDoS via nested *() extglobs).