chore: bump kcl-ci to v1.40.2

Use generic email for mirror commits (noreply@forgejo-actions)
to avoid exposing internal domain on Codeberg.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.forgejo/workflows/upstream-sync.yml

@@ -1,4 +1,4 @@
-# Generated by KCL v1.40.0 - DO NOT EDIT
+# Generated by KCL v1.40.2 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci