update cosmos to version 4.0.2

there's a bug in version 3.9.2 of cosmos on windows: when running bash (or other cosmo programs) via ctx.actions.run, those programs can't exec other programs

it's partially fixed in 4.0.2. bash with a script file still can't run programs, but bash -c can. so you can use -c bash ...args to get around the issue