v2.7.0

What's Changed

• docs(canon): cross-repo contract binding and merge-authority deferral by @samartomar in #401
• fix(canon): fail closed without code-review-graph by @samartomar in #403
• docs: align support-policy claims and overview journey with latest-minor policy; widen versioned-surface lock by @samartomar in #404
• Release v2.7.0 by @samartomar in #406

Full Changelog: v2.6.0...v2.7.0