Release 2.1.40 (2026-06-17)

Features

• grant the USER agent identity issue edit rights (#1686) Remove the issue edit denial from _DENIED_AGENT so the USER (vergil-user) identity inherits issue edit from the base allowlist. This lets an implementing agent keep the issue current as work progresses — ticking checklist items, refining the body, and correcting the title/metadata — without interrupting the human for a low-risk, fully-audited mutation.

Scope is USER only. AUDIT is unaffected: its allowlist (_ALLOWED_AUDIT) has no issue key, so it is blocked by the allowlist gate before reaching the denied-pairs check. issue close and reopen remain human-only, consistent with the PR/issue boundary.