Release v0.4.1

Release Images

Image	Registry
`projects.registry.vmware.com/pinniped/pinniped-server:v0.4.1`	VMware Harbor
`docker.io/getpinniped/pinniped-server:v0.4.1`	DockerHub

None

There is only one change included compared to v0.4.0:

When the the Supervisor is configured to use the upstream OIDC Provider's email claim as the downstream username, then validate that the email_verified claim has the value true if the email_verified claim was included in the upstream ID token. If the email_validated claim is not included in the upstream ID token, then assume that the upstream provider doesn't implement it and allow the login to continue. This change only impacts configurations where the configured upstream OIDC Provider supports the email_verified claim, which is usually supported Providers which allow users to either self-register for an account or modify their email addresses on an existing account.