v0.6.6

Move protobuf release policy to the pinned external runner model. New consumers reference their repository-specific checker rather than a vendored shared core.

Strengthen workflow-change coverage with structural trigger validation, canonical path enforcement, and fail-closed handling for ignored, negated, conflicting, or duplicate filters. Update the consumer template and add regression coverage for malformed and bypass-oriented inputs.