v0.7.0

Changed

• Requires Go 1.27. go.mod targets Go 1.27 and CI builds with it;
  a consumer module has to be on Go 1.27 or newer. golangci-lint is now
  installed from source in CI, because the prebuilt binary is built with
  an older Go and refuses a module that targets a newer one.

Fixed

• litefake: a refused login answers like the box. POST /api/auth/v1/login
  with an unknown user or a wrong password now answers
  401 {"error":"invalid-credentials","message":"invalid credentials"} — the
  answer observed on a real openccu-lite box (1.0.0-dev.32), identical for both
  cases. litefake answered the generic route error unauthenticated, so a client
  could not be tested against telling a refused login apart from a missing
  session. The contract records it (CONTRACT §A.2).