Agent Pantry v0.7.0

What's Changed

• chore(cut-release): fetch only origin/master and guard the fetch by @solomonneas in #23
• chore: gitignore .graphtrail/ (graphtrail MCP local index) by @solomonneas in #24
• docs: standardize workflow diagram with plating by @solomonneas in #25
• feat: add Brigade station contract by @solomonneas in #27
• feat(surface): Playwright/Puppeteer storageState target and adapter by @solomonneas in #30
• feat: localStorage capture and restore over CDP by @solomonneas in #33
• feat: live-Chrome localStorage restore and browser launch helper by @solomonneas in #34
• feat: add fail-closed desktop app restore inspection by @solomonneas in #35
• chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #28
• docs: sweep README, threat-model, and init template (#44-49) by @solomonneas in #55
• test(policy): add FuzzDenyWins for deny-wins invariant by @solomonneas in #56
• Test invariant gaps: source prev snapshots, FallbackOpener, OpenClaw deletes by @solomonneas in #57
• chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #36
• chore(deps): bump modernc.org/sqlite from 1.53.0 to 1.54.0 by @dependabot[bot] in #37
• fix(vault): report Local State lookup failure instead of guessing a path by @solomonneas in #58
• fix(surface): preserve cookie timestamps and back up the target DB by @solomonneas in #59
• docs: add key lifecycle checklist by @solomonneas in #62
• docs: proposals for gated features #51–#54 by @solomonneas in #64
• fix(cli): allow explicit rotate key path by @solomonneas in #66
• fix(keygen): require source restart after recovery (#63) by @solomonneas in #67
• chore(deps): bump modernc.org/sqlite from 1.54.0 to 1.55.0 by @dependabot[bot] in #61
• chore(deps): bump github.com/tobischo/gokeepasslib/v3 from 3.6.2 to 3.7.0 by @dependabot[bot] in #60
• fix(sqluri): enforce read-only SQLite opens via file: URI by @solomonneas in #69
• fix(cdpvault): bound CDP /json target polling responses by @solomonneas in #72
• fix(browser): restore multi-origin headless sessions by @solomonneas in #70
• chore: release v0.7.0 by @solomonneas in #78
• fix: update Go toolchain to 1.25.13 by @solomonneas in #79

Full Changelog: v0.6.0...v0.7.0