Release v7.0.2

Patch release of the 7.0 line with vers search hardening.

Fixed floor-less vers intervals and hardened the stub-row guards with an order-independent neutraliser, interval-scoped contradiction checks, and chunked sibling fetches. Stopped composing vers ranges that match versions outside the affected intervals, kept the introduction-floor reading for kernel-style bare affected entries, and scoped npm package names from the record's own CPE (#277, #278). Switched SBOM generation to the new @cdxgen/cdxgen package namespace (#276). Refreshed locked dependencies and GitHub Actions pins (#281).

Full Changelog: v7.0.1...v7.0.2