Omni-SAG v1.7.0

What's Changed

• feat: route API/CCP/LDAP TLS through FIPS-approved config under warn/enforce by @rupivbluegreen in #42
• feat: tunnel protocol identification (opt-in observe + enforce) by @rupivbluegreen in #43
• feat: OpenTelemetry (OTLP) export — traces + optional metrics/logs (opt-in) by @rupivbluegreen in #44
• docs: roadmap — OTLP + FIPS TLS routing now shipped (v1.x) by @rupivbluegreen in #45

Full Changelog: v1.6.5...v1.7.0