chore(OMN-18010): post-release dev version bump to 0.4.90 [release-on-merge]

[onexbot-occ-writer]

Summary

Automated post-release disarm step (OMN-18010, porting OMN-13912). Publishing v0.4.89 left dev's [project].version equal to the highest published tag, which ARMS the OMN-16344 release-identity gate (scripts/check_release_identity.py) against every subsequent dev PR that touches src/**.

This PR bumps [project].version to 0.4.90 and re-locks uv.lock, so the gate is disarmed by the same flow that armed it rather than by whichever unrelated PR trips it first.

The title carries the release-on-merge marker on purpose: this commit touches pyproject.toml, so without the marker its own merge would re-enter the release workflow and publish an empty version.

Ticket

OMN-18010 — release on merge for every publishing repo.

Triggered by

https://github.com/OmniNode-ai/omnimarket/actions/runs/34903285700

Test plan

• the release-identity gate is green on this PR (that IS the behaviour under test)
• CI passes (lockfile resolves)

Evidence-Ticket: OMN-18010
Evidence-Source: OCC#9584

[github-actions]

✅ Architectural Review — PASSED

Errors: 0
Warnings: 0

What this checks

Rule	Description
ARCH-TOPIC-001	No hardcoded Kafka topic strings in handler code
ARCH-DI-001	No event_bus=None bypass
ARCH-DI-002	No direct Handler instantiation outside workflow_runner/adapters
ARCH-DI-003	No reinvented DI containers
ARCH-TOPIC-002	contract.yaml topics follow `onex.{cmd

---

No architectural violations found.

Static architectural lint — no model inference (OMN-14176).

[onexbot-occ-writer]

OCC autobind did not mint a companion for this PR: no changed-file candidate could be proven RED against the merge base, and emitting a PR-existence probe instead would be non-falsifiable evidence (OMN-15247). Hand-authored evidence is required.

[github-actions]

✅ Hostile Reviewer — PASSED

Blocking findings (critical/error): 0
Total findings: 0
Models succeeded: qwen3-review,qwen3-review-b

---

Gate semantics

Verdict	Meaning	Blocks merge?
passed	>=2 models succeeded, no critical/error findings	No
blocked	CRITICAL or ERROR findings found	Yes
degraded	Fewer than 2 models succeeded (infra unavailable/timeout)	Yes (OMN-15110)

Powered by omniintelligence.review_pairing.cli_review — node-based adversarial review via HandlerLlmCliSubprocess (OMN-8524)

[jonahgabriel]

Merge-sweep cleanup claim: closing as superseded by #2558, the current OMN-18010 release-on-merge bump to 0.4.91. This PR only bumps pyproject.toml/uv.lock to 0.4.90 after the 0.4.90 publish, so #2558 is the correct live disarm bump.