fix: guard importlib.metadata import, bump to v0.4.2

The module-level pkg_version() call crashes if rafter-cli isn't
installed in the current environment. Wrapped in try/except with
hardcoded fallback. Bumped to 0.4.2 since 0.4.1 artifacts already
exist on npm/PyPI.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Rome-1

node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rafter-security/cli",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "type": "module",
   "bin": {
     "rafter": "./dist/index.js"

node/src/index.ts

@@ -9,7 +9,7 @@ import { checkForUpdate } from "./utils/update-checker.js";
 
 dotenv.config();
 
-const VERSION = "0.4.1";
+const VERSION = "0.4.2";
 
 const program = new Command()
   .name("rafter")

python/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "rafter-cli"
-version = "0.4.1"
+version = "0.4.2"
 description = "Rafter CLI"
 authors = ["Rafter Team <hello@rafter.so>"]
 license = "MIT"

python/rafter_cli/__main__.py

@@ -7,11 +7,14 @@
 import subprocess
 import re
 import sys
-from importlib.metadata import version as pkg_version
 from dotenv import load_dotenv
 from rich import print, progress
 
-__version__ = pkg_version("rafter-cli")
+try:
+    from importlib.metadata import version as _pkg_version
+    __version__ = _pkg_version("rafter-cli")
+except Exception:
+    __version__ = "0.4.2"
 
 
 def _version_callback(value: bool):