release: publish push gateway chart 0.4.0 (#8231)

Publish push gateway chart 0.4.0 through the repository's protected
release lane. The chart implementation and version already landed in
[#8206](https://github.com/block/buzz/pull/8206); this PR adds release
notes without changing runtime behavior.

Merging `push-chart-release/0.4.0` invokes the release bot to create
`push-chart-v0.4.0` and publish the immutable chart to GHCR. Publication
unblocks [the wrapper
chart](https://github.com/squareup/cash-helm-charts/pull/5740) and
subsequent disabled-production preparation. This does not activate any
gateway.

### Validation

Release notes match the merged single-application configuration and
migration guards. Diff checks pass. The source PR's required checks and
PostgreSQL suite passed; chart validation will run again on this release
PR.

Signed-off-by: Tom Brow <tomb@block.xyz>

deploy/charts/buzz-push-gateway/README.md

@@ -1,5 +1,16 @@
 # Buzz push gateway chart
 
+## 0.4.0 release
+
+This release configures one Apple application per gateway through `application`,
+replacing the profile map. Use it with the gateway implementing `buzz-push-v1`;
+clients must enroll again using the new capability. Configure the App Attest
+application ID and APNs topic explicitly before enabling the gateway.
+
+Stop old gateway instances and verify the migration prerequisites before
+activation. The gateway migration refuses existing installations, and the relay
+migration refuses active legacy leases; neither deletes registration state.
+
 ### Platform-managed runtime integration
 
 `podLabels`, `serviceAccountName`, and `terminationGracePeriodSeconds` configure