Release v0.5.7

Append-only tenant-aware SessionEvent stream.
Sprint A Phase 1.
Local-first JSONL, HITL evidence path.
CAT stamp.

What's Changed

• docs(compliance): Super Grok regulatory mapping 2026-07-19 by @fivepanelhat in #18
• docs: emphasise privacy, security, and governance by @fivepanelhat in #20
• chore(license): restamp to Coastal Alpine Tech Limited by @fivepanelhat in #22
• chore(ci): bump actions/checkout to v6 for Node 24 runtime by @fivepanelhat in #23
• chore(ci): bump actions/checkout@v4 → @v6 in composite action by @fivepanelhat in #24
• chore(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #6
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #7
• chore(deps): bump actions/setup-node from 4 to 7 by @dependabot[bot] in #12
• chore(deps): bump actions/setup-python from 5 to 7 by @dependabot[bot] in #19
• chore(deps-dev): update pre-commit requirement from >=3.5.0 to >=4.6.1 by @dependabot[bot] in #21
• chore(deps): bump cryptography from 49.0.0 to 50.0.0 in the uv group across 1 directory by @dependabot[bot] in #25
• feat(session-events): SessionEvent store for Sprint A Phase 1 (v0.5.7) by @fivepanelhat in #27

New Contributors

• @dependabot[bot] made their first contribution in #6

Full Changelog: v0.5.6...v0.5.7