klausctl release v0.4.0

Added

• (self-update) Install a release binary only after its cosign Sigstore bundle verifies in #342 by @teemow

Full Changelog: https://github.com/giantswarm/klausctl/compare/v0.3.3...v0.4.0