Release v0.8.7

🎉 What's Changed

✨ Features

• feat(security): add response headers and browser regressions (ecc6c67)

🐛 Bug Fixes

• fix(ci): avoid ripgrep dependency in documentation checks (5a7e60a)
• fix(security): restrict sensitive access-log capabilities (c086b90)
• fix(security): bound generated resource input and pagination (314cd41)

📚 Documentation

• fix(ci): avoid ripgrep dependency in documentation checks (5a7e60a)
• docs: mark merged security workstreams complete (d161405)
• docs: reconcile v0.8.6 roadmap and routing (c6cc0d7)

🧪 Tests

• test(security): cover threat-model boundaries and fail closed JWT validation (ad7bd6f)

🔧 Other Changes

• chore(release): prepare v0.8.7 and validate merged security work (221cb51)