connectors 0.7.0

• Catalog write discovery now considers every admitting Connection, so an earlier read-only
  placement cannot hide a writable one. Search and describe report required approval; invoke
  still checks the explicitly selected Connection.
• Default operation, Connection and event commands to the local target regardless of saved hosted
  login. Use --target hosted explicitly; incompatible local configuration flags are refused.
• Run bounded operation search, describe, invoke and Connection metadata reads without a daemon
  when its socket is absent. Stateful sessions, activation and event flows still require
  connectors serve local; uncertain transport outcomes never trigger a fallback invocation.
• Add kubernetes.namespace.list and kubernetes.workload.list for activated Connections,
  returning admitted namespaces and Deployments with container images and desired/ready replicas.
• Expose personal GitLab Connections and four source-grounded pipeline-schedule operations:
  list, create, update and delete. Preserve the official request schemas, including inputs and
  omitted versus null fields; mutations require the selected Connection's write admission.
• Treat a consumer closing a successful output pipe as normal completion across output formats.
  Protocol refusals and other output failures remain failures.
• Add Operation v0alpha2 structured rate_limited refusals, optional trusted retry delay and
  source-grounded advisory rate metadata. Retain v1 with explicit loss of the new fields;
  neither advice nor version selection resends an invocation.
• Advance the canonical catalog and matching readers to schema 4 for personal OAuth declarations,
  retaining schema 3 request-semantics/rate behavior and frozen schema 2 and 3 artifacts.
• Add explicitly configured GitLab public PKCE and device authorization, token-info verification,
  refresh and durable recovery through one dedicated OAuth store. This initial personal custody
  is unsealed and development-only; private instructions use a terminal or owner-only file.
• Default operations to v0alpha3 with typed authentication_required
  refusals. Trusted local setup binds remediation to the intended operation and Connection, then
  stops ready for a separate explicit invocation. operation --protocol-version v2 retains
  explicit interoperability; no negotiation, automatic session creation or invocation replay.

Also included since the last published release (v0.6.0)

• Add bounded, read-only GitLab fetch sessions over internal TLS for the admitted default branch
  and exact commit, including Git protocol v2 support and the hosted client operation. Recheck
  identity, grants and project membership; bound session lifetime, depth, requests and bytes.
• Reuse a bounded set of provider HTTP connections while rechecking destination policy and DNS
  for every request.
• Keep concurrent hosted Connect Session expiry terminal after credential verification and custody
  awaits, so an expired session cannot become completed.
• Keep legacy GitLab connections inactive until a verified reconnect binds current authority;
  preserve their metadata and refuse recovery when a credential transaction's grant is absent
  or superseded.
• Refresh all twelve Cargo workspace lockfiles together with the release identity so cold runners
  can fetch and verify the complete locked graphs.

What's Changed

• git: support bounded protocol v2 and reuse upstream connections by @b10x-bot[bot] in #11
• Keep legacy GitLab connections inactive without stopping the host by @b10x-bot[bot] in #12
• Fix GitLab Smart HTTP token authentication by @b10x-bot[bot] in #15
• gitlab: accept smart http preamble before git v2 discovery by @b10x-bot[bot] in #16
• Make personal CLI connections and operation workflows usable by @b10x-bot[bot] in #14
• cli: deliver governed local writes and one-shot operations by @b10x-bot[bot] in #17
• feat: govern GitLab schedules and preserve structured rate limits by @b10x-bot[bot] in #18
• auth: add personal OAuth and bound authentication recovery by @b10x-bot[bot] in #19
• chore: release connectors v0.7.0 by @b10x-bot[bot] in #21

Full Changelog: v0.6.2...v0.7.0