chore(release): v4.1.0 — demo pins + Bug Bash Thursday changelog

[genwave-radio]

The v4.1.0 release train (tag pushed, per Dean's word):

• compose.demo.yaml: all 5 pins home-v4.0.0 → home-v4.1.0
• CHANGELOG: the Bug Bash Thursday entry — gh-TTS: Hear It does not play actual rendered sound #491 (rules-over-corrections precedence), context: somber vocabulary plural asymmetry — 13 singular-only disaster nouns #479, save-as-own provenance guard is read-then-write (TOCTOU) — make it a conditional upsert #394, personas: out-of-range pace should warn at IMPORT time, not silently clamp #483, tts: respell-assist needs a capability probe to hide before first use on espeak-less boxes #487, obs: Health card shows raw Docker RestartCount with no recency — historical restarts read as live alarms #490, nuget: GenWave.Abstractions ships no XML docs — GenerateDocumentationFile missing at pack time #417, docs: four stale prose references to the old RequestCompletionAsync name #477, plus the tracker relabel

DEPLOYMENT.md grepped for pin drift: clean this time. Merge once release.yml is green, then launch.sh --pinned on the demo box. First thing to re-test: Hear It with the old MacLeod correction still in place — it should track every respelling change now, and the editor will flag the correction as suppressed when the rule is saved.