feat: #3611413 Release Varbase Project template 11.0.4

Release Varbase Project template 11.0.4.

Issue: https://www.drupal.org/project/varbase_project/issues/3611413

• composer.json: version 11.0.x-dev -> 11.0.4; vardot/varbase + vardot/varbase-patches 11.0.x-dev -> ~11.0.0.
• composer.lock: regenerated against the final composer.json (Drupal core 11.4.4, Varbase 11.0.0-beta2, varbase-patches 11.0.24). patches.lock.json unchanged.
• README.md: version shield 11.0.3 -> 11.0.4.
• CHANGELOG.md: added with the 11.0.4 entry and security rationale.

Security: this release updates Drupal core to 11.4.4 (released 15 Jul 2026), covering:

• SA-CORE-2026-010 Drupal core - Moderately critical - Information disclosure
• SA-CORE-2026-011 Drupal core - Moderately critical - Cross-site scripting
• SA-CORE-2026-012 Drupal core - Moderately critical - Cross-site scripting

AI-Generated: Yes (Used Claude Code to bump the version, pin the released Varbase dependencies, regenerate the Composer lock, and add the CHANGELOG entry)

Checkpoints

• File an issue about this project
• Addition/Change/Update/Fix to this project
• Testing to ensure no regression
• Automated unit/functional testing coverage
• Developer Documentation support on feature change/addition
• User Guide Documentation support on feature change/addition
• UX/UI designer responsibilities
• Accessibility and Readability
• Reviewed by a human
• Code review by maintainers
• Full testing and approval
• Credit contributors
• Review with the product owner
• Update Release Notes
• Release