release: v0.7.0

[rsecss]

Summary

v0.7.0 hardening release — closes 7 sub-branches of the v0.7.0 epic.

🛠️ Fixes

• npm vulns cleared (fix(deps): clear 8 npm vulnerabilities #28), stat export hardened (fix(stat): harden export path, transactional migration, bounded writer (F01/F02/F08) #27), macOS fullscreen capability degraded (fix(macos): degrade fullscreen detection capability to false (F03/F28) #29).

🧪 Refactor

• Tray/Window/Effect services brought into test build via Port traits (refactor: remove defensive/fallback code patterns (F09/F10/F11/F26/F27) #30, refactor(services): extract pure helpers and EffectSink trait (F23) #31, refactor(services): WindowPort + TrayPort traits to expose tray/window to test build #32).

🔧 Maintenance

• Coverage gate established at 80/70 (ci(coverage): add 80/70 frontend + 80% backend coverage gate #26) and raised to 90/85 (test(coverage): raise frontend+backend gates to 90% lines / 85% functions #33).

Test plan

• `npm run ci` 8/8 green locally
• `cargo llvm-cov --fail-under-lines 90 --fail-under-functions 85` green
• PR CI three-platform green
• Post-merge: tag v0.7.0 on main triggers release CI installer build

🤖 Generated with Claude Code