v0.7.0

What's Changed

• chore(deps): bump Go 1.26.5, k8s.io 0.36.2, prometheus/common 0.69.0 by @thc1006 in #195
• chore(tools): refresh dev toolchain + resolve golangci-lint v2.12 goconst findings by @thc1006 in #196
• chore(claude): remove untailored wshobson agent/command/skill bulk import by @thc1006 in #197
• test(ephemeris): Vallado SGP4-VER golden + fix 3GPP range constants (I-16, N-11) by @thc1006 in #198
• Audit remediation: v1.0 runtime blockers + failover/SSRF/orbit-guard + observability by @thc1006 in #199
• fix(ephemeris): trim pass windows to the minElevation mask [I-22] by @thc1006 in #201
• feat(failover): anti-flap — N-consecutive confirmation, min-dwell, recovery-based switchback timer [I-9] by @thc1006 in #203
• fix(ephemeris): fetch resilience — auth-body, rate-limit reclassify, cache fallback [I-18/I-19b/I-20] by @thc1006 in #200
• fix(chart): NetworkPolicy egress for Prometheus/gNB; add ops docs [I-27/I-28/I-30/B-7] by @thc1006 in #202
• fix(controller): re-push runtime NTN config on epoch advance, not GP-fetch time [I-12] by @thc1006 in #204
• feat(ha): active-passive high availability via leader election [N-9] by @thc1006 in #205
• feat(security): opt-in wss:// + shared-secret / mTLS for the gNB runtime push [N-12] by @thc1006 in #206
• docs: correct stale strings + koffset doc-comment [WO-15] by @thc1006 in #208
• fix(provider): own the ConfigMap at create + UID-scoped cleanup [WO-16 PR A] by @thc1006 in #210
• feat(api): condition columns, string caps, IPv6+port endpoint validation [WO-16 PR B] by @thc1006 in #211
• feat(satelliteephemeris): observe cap truncation via status + transition-gated event [WO-16 PR C] by @thc1006 in #212
• docs(api): deprecate (not remove) spec.satellites.constellation [WO-16 PR D] by @thc1006 in #213
• feat(controller): WO-20 event & GitOps hygiene — emit after status, gate on transition by @thc1006 in #215
• release: v0.7.0 — audit season (event/GitOps hygiene, validation, observability) by @thc1006 in #217

Full Changelog: v0.6.0...v0.7.0