v3.7.0 — /autopilot: opencode as orchestrator with auto-heal

The /goal contract made drivable: ASSESS what's left (board + gate receipts + requirement-closure denominator in STORIES, product map, unmerged branches, red suites) → DECIDE the path (ordered next-actions, each with an exit predicate) → DRIVE the existing loops (conductor/run-until-done/run-plan; NEVER-AUTO still pauses) → HEAL stuck work (narrowed retry → split → tier escalation → durable park with evidence; byte-identical gap set twice = no-progress halt) → EXIT on the proven-product predicate. 725 tests green; planted-red self-test proves the checks bite. attest-claude unchanged (0 generated files; /autopilot tracked in KNOWN_MISSING_IN_CLAUDE beside /wave and /goal).