Agent 4.0: one image, TLS built in

The 4.0 generation started in the engine room: the agent’s Docker variants were consolidated into one image with unified TLS certificate handling and a modernized entry point. On the addons side, the legacy billing subsystem was removed entirely, clearing the deck for the rebrand three weeks later.