v2.9.7

What's Changed

• docs: record the 2.9.6 post-release bridge by @captainpacket in #408
• chore: advance the release provenance anchor to 2.9.6 by @captainpacket in #409
• fix: 2.9.7 customer-followup tranche (progress bar, SNMP vendor, failure reasons, sync-form map check, routing delete-blockers) by @captainpacket in #410
• feat: give SNMP endpoints interfaces and IP addresses by @captainpacket in #411
• fix: live-validate the 2.9.7 tranche, fix what only live execution finds by @captainpacket in #412
• test: guard every builtin .nqe file against the lint-clean/runtime-broken bug class by @captainpacket in #413
• test: pin that every bespoke workload_state sweep model is refused elsewhere by @captainpacket in #414
• fix: protect a durable-state delete when a sibling map still supplies it by @captainpacket in #415
• fix: isolate the sensitive-content test fixture from an ambient GIT_DIR by @captainpacket in #416
• docs: document the HSRP foreach-group linter false positive by @captainpacket in #417
• fix: say when an uncovered device is still tagged in Forward's configuration by @captainpacket in #446
• chore: bump tested NetBox runtime to 4.6.10 (+ fix a delete-protection regression it surfaces) by @captainpacket in #447
• release: prepare v2.9.7 by @captainpacket in #448
• release: authorize v2.9.7 by @captainpacket in #449

Full Changelog: v2.9.6...v2.9.7