v0.7.0 — GitHub Release notes

Added\n\n- Read the exact public GitHub Release tag for npm candidate versions when package metadata points to github.com.\n- Attach bounded release notes and a GitHub link to compatibility events and DSH analysis tasks.\n- Keep GitHub failures independent from OSV/npm monitoring, preserve same-candidate notes during temporary outages, and cache release lookups.\n\n## Verification\n\n- 62 automated tests passing\n- deterministic Radar showcase regenerated\n- real DSH headless handoff passing\n- live OSV/npm/DSH proof passing