1.0.7-rc.1

1.0.7-rc.1 — release candidate on all four registries

Built from 01f00f2, whose tree reads 1.0.5 / 8.0.6: a pre-release version is never
committed (scripts/check-no-prerelease-versions.sh), so this annotation is the record of
what was published.

npm 1.0.7-rc.1 (14 @metaobjectsdev/* packages, dist-tag next)
Maven Central 8.0.7-rc.1 (com.metaobjects; deployment 51aad5b3-06e5-411a-8844-b76edd75ddcc)
PyPI 1.0.7rc1 (metaobjects — PEP 440 spelling)
NuGet 1.0.7-rc.1 (publish-csharp.yml run 36028695837)

All four moved: every port has product changes since 1.0.5 / 8.0.6. metamodelVersion holds
at 1.0 (scripts/check-metamodel-version.mjs: no change since v1.0.5).

What rc.1 carries over 1.0.5 / 8.0.6:

• extract (all four engines): XML mixed content keeps its text; an element with only
  child elements is MALFORMED for a string field, never a stringified map; an unclosed
  element ends at a stray close tag (01f00f2). JSON: a fenced answer is not discarded
  for an earlier object or a brace in prose (#363, fb2c22d).
• migrate-ts / cli: --rename-column / --rename-table declare a rename so the data is
  kept; changes that fail on a populated table warn, and the Postgres file carries the
  preparation step (7545068, 56f29a9).
• codegen (all five ports): generated routes say they are unauthenticated and how to
  guard them (#367, d2144e1); TS routesFile({ registerAll: true }) (f12916a).

Gates: hosted local-ci green on 01f00f2; ci-local --quick green.
Adopter estate: NOT YET RUN at tag time — see the promote commit / v1.0.7 for the result.