chore: release v4.0.0-rc.0

Major because DeleteUserRequest lost a required public field: .email is gone
and .id replaces it. Admin-only surface, but it is a breaking type change, so
consumers pinning ^3 stay on 3.x rather than being silently upgraded.

Author: lakhansamani

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authorizerdev/authorizer-js",
-  "version": "3.3.0",
+  "version": "4.0.0-rc.0",
   "packageManager": "pnpm@8.15.6",
   "author": "Lakhan Samani",
   "license": "MIT",