release: cli 0.6.29 + sandbox 0.2.40

[akirillo]

Release prime-sandboxes 0.2.40 with the live-process/exec RPC hardening from #837, and Prime CLI 0.6.29 with the prime train stop spinner and status poll from #865.

This PR also raises the CLI dependency floor to prime-sandboxes>=0.2.40, so a CLI install pulls the hardened SDK instead of resolving back to 0.2.39.

I validated #837 against a live dev VM sandbox. A mid-stream transient fault now re-attaches by pid and the process survives with its exit code intact, and the background-job mkdir guard stops an ambiguous launch timeout from running the command twice. Two limits a reviewer should know: recovery from a fault that arrives before the PID event depends on sandboxd echoing the session tag, which the deployed sandboxd does not do, so that path is inert; and live-process control RPCs (stdin/signal) still fail on a transient fault, because they only retry UNAUTHENTICATED. Both are addressed by the in-flight idempotency-key work, not by this release.

🤖 Generated with Claude Code

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f6fd3f0251

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".