pack: v0.40.0 — drop Alex's Mobs + bounty board fix + Numismatics polish

Drops Alex's Mobs from the pack (105 -> 103 mods total). The 4 AM-mob
bounty entries are replaced with vanilla 1.21.x mob bounties (Breeze,
Bogged, Evoker, Vindicator, Piglin Brute, Ravager).

Bounty board bug fix: KubeJS PlayerEvents.loggedIn now ensures the
daily pool is rolled on first login. Previously the pool only rolled
when a player ran /bns bounty list, so the bounty board screen showed
empty for anyone who'd never typed that command.

/bns tier upgrade now uses combined cash+bank deduction via
NumismaticsBridge.spend (Java). Players who've sold a fortune into
their bank can now spend it on tier upgrades directly.

Every player gets a bound white_card on first login — no more "I need
to craft + bind a card before I can spend at a Vendor block" friction.

bnstoolkit 0.6.2 -> 0.7.0.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

pack/pack.lock.json

@@ -1,13 +1,13 @@
 {
   "$schema": "Brass-and-Sigil pack.lock.json - generated, do not edit by hand unless you know what you are doing",
   "name": "Brass and Sigil",
-  "version": "0.39.2",
+  "version": "0.40.0",
   "minecraft": "1.21.1",
   "loader": {
     "type": "neoforge",
     "version": "21.1.228"
   },
-  "lockedAt": "2026-06-08T16:19:08Z",
+  "lockedAt": "2026-06-08T17:18:54Z",
   "mods": [
     {
       "source": "modrinth",
@@ -1054,17 +1054,6 @@
       "size": 193381,
       "side": "both"
     },
-    {
-      "source": "modrinth",
-      "slug": "alexs-mobs(1.21.1)",
-      "versionId": "KSgki4uc",
-      "version": "1.22.17",
-      "path": "mods/alexsmobs-1.22.17.jar",
-      "url": "https://cdn.modrinth.com/data/EmNhnNnt/versions/KSgki4uc/alexsmobs-1.22.17.jar",
-      "sha1": "5070e8070f60650d773bfd9f1d031496f8f50259",
-      "size": 26620546,
-      "side": "both"
-    },
     {
       "source": "modrinth",
       "slug": "item-obliterator",