v0.7.0

Fixed

• Dynamic JSON 401/403 catchalls normalize only recognized per-request metadata while preserving semantic authentication responses.
• Scoped authentication fingerprints suppress matching descendants without hiding the protected root directory.

Verified

• The locked 240-test suite and optimized release build passed.
• Repeated loopback scans preserved the real protected child and stopped recursive authentication-wall expansion.