v2.7.0

npm/JSR web-subpackage release of 2026-07-16, tag + Release backfilled: the release pipeline's subpackage lane published the registries without creating the root tag (fixed in cplieger/ci#331).

Added

• (web) Export the session-route path contract