v0.40.2
- [x] Make
install-hosted-modules-frontend.shsurface npm's real error (--loglevel errorinstead of--silent) so a GitHub Packages 401/403 shows in the CI log instead of a bare "npm install failed", plus an auth-oriented failure hint. (Root cause of the v0.40.0 CI failure is thePKG_TOKENsecret losing registry access — the vtt-assets@0.2.1 package itself is published and unaffected; token rotation is a manual GitHub step.)