deps(secrets): bump ZB.MOM.WW.Secrets* to 0.4.0 and take the Grpc replicator

0.4.0 adds ZB.MOM.WW.Secrets.Replicator.Grpc — the pull-only central secrets
hub scadaproj#3 selected as ScadaBridge's production topology. The four
existing pins move with it rather than straddling two versions: they share the
Abstractions surface the replicators bind to, and a mixed set is a restore that
resolves but composes types from two different builds of the same seam.

One package carries both halves (server + sweep client); which half a node
composes is a registration-time decision, so only the Host — the composition
root for both roles — references it.

nuget.config already maps ZB.MOM.WW.Secrets.* to the dohertj2-gitea feed, so
no source-mapping change was needed. Restore verified against the feed.

Claude-Session: https://claude.ai/code/session_014WNM4vjoVksyyBraTXSZE1

Directory.Packages.props

@@ -104,10 +104,11 @@
     <PackageVersion Include="ZB.MOM.WW.Auth.AspNetCore" Version="0.1.5" />
     <PackageVersion Include="ZB.MOM.WW.Audit" Version="0.1.0" />
     <PackageVersion Include="ZB.MOM.WW.Theme" Version="0.3.1" />
-    <PackageVersion Include="ZB.MOM.WW.Secrets" Version="0.2.3" />
+    <PackageVersion Include="ZB.MOM.WW.Secrets" Version="0.4.0" />
-    <PackageVersion Include="ZB.MOM.WW.Secrets.Abstractions" Version="0.2.3" />
+    <PackageVersion Include="ZB.MOM.WW.Secrets.Abstractions" Version="0.4.0" />
-    <PackageVersion Include="ZB.MOM.WW.Secrets.Ui" Version="0.2.3" />
+    <PackageVersion Include="ZB.MOM.WW.Secrets.Ui" Version="0.4.0" />
-    <PackageVersion Include="ZB.MOM.WW.Secrets.Replicator.SqlServer" Version="0.2.3" />
+    <PackageVersion Include="ZB.MOM.WW.Secrets.Replicator.SqlServer" Version="0.4.0" />
+    <PackageVersion Include="ZB.MOM.WW.Secrets.Replicator.Grpc" Version="0.4.0" />
     <PackageVersion Include="ZB.MOM.WW.LocalDb" Version="0.1.3" />
     <PackageVersion Include="ZB.MOM.WW.LocalDb.Replication" Version="0.1.3" />
     <PackageVersion Include="ZB.MOM.WW.LocalDb.Contracts" Version="0.1.3" />

src/ZB.MOM.WW.ScadaBridge.Host/ZB.MOM.WW.ScadaBridge.Host.csproj

@@ -41,6 +41,10 @@
     <PackageReference Include="ZB.MOM.WW.Secrets.Abstractions" />
     <PackageReference Include="ZB.MOM.WW.Secrets.Ui" />
     <PackageReference Include="ZB.MOM.WW.Secrets.Replicator.SqlServer" />
+    <!-- Both halves of the pull-only central secrets hub ship in one package: central
+         hosts the gRPC service, a site runs the sweep client. Which half a node composes
+         is decided at registration time by its role — see SecretsRegistration. -->
+    <PackageReference Include="ZB.MOM.WW.Secrets.Replicator.Grpc" />
     <PackageReference Include="ZB.MOM.WW.LocalDb" />
     <PackageReference Include="ZB.MOM.WW.LocalDb.Replication" />
   </ItemGroup>