5.0.7

Changes\n- port the richer observability rollups and contract reporting onto the current 5.0.6/main line\n- advertise supported observability endpoints consistently, including conditional /my_health when auth is enabled\n- add contract coverage for observability payloads and session-aware auth reporting\n