chore: release v4.1.0

[bitcoindevkit-release-plz]

🤖 New release

• bdk-cli: 4.0.0 -> 4.1.0

Changelog

4.1.0 - 2026-09-25

Added

• (multipath) Add checks for desc pair
• (multipath) Add tests for multipath desc
• (multipath) limit multipath desc to two paths
• (multipath) add multipath desc support

Fixed

• harden datadir and config file permissions
• (combine_psbt) Propagate Psbt::combine errors

Other

• removed changelog section from pr template

• bump workflow action versions

• add release-plz workflow and update release docs

• Added support for Multipath (two-paths) descriptors.

• Fixed the data directory and config.toml permission being world-readable (0755/0644) to 0700/0600 on Unix.

---

This PR was generated with release-plz.

[notmandatory]

Ran this as a test to confirm the GitHub settings are correct. Looks good so far, the final test will be when we publish the next version. Before publishing we should update this PR by running the release-plz action again, and then manually clean up the CHANGELOG.md file before merging.

[notmandatory]

@tvpeter any ideas on what we need to do to fix the audit issues? Are we waiting for some upstream fixes?

[tvpeter]

@tvpeter any ideas on what we need to do to fix the audit issues? Are we waiting for some upstream fixes?

Yes, we are waiting for upstream fix. @vadim-anfv was tracking it in #308