v0.0.7

Bump version to 0.0.7 and fix security issues

- Fix parse error handling in check_query_capabilities to reject
  malformed
  queries (fail closed) instead of allowing them
- Add re-validation of session roles on every request for auth_key mode,
  ensuring role downgrades and revocations take effect immediately
- Update test references from list_streams() to streams()
- Add comprehensive test for session role downgrade enforcement