chore(release): qp-vault 1.7.0

Security hardening release. BREAKING (secure-by-default): create_vault_router now
requires a role_resolver (or explicit require_auth=False); per-operation RBAC is
fail-closed; import/export confined to io_base_dir; hybrid encryption uses HKDF-SHA3.

Author: bradleygauthier

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "qp-vault"
-version = "1.6.0"
+version = "1.7.0"
 description = "Governed knowledge store for autonomous organizations. Trust tiers, cryptographic audit trails, content-addressed storage, air-gap native."
 readme = "README.md"
 license = "Apache-2.0"