Stable v2.7.0

• feat: finalize Site Doctor (Phase 3) + CRA live OSV cross-check feed
• docs(roadmap): Docker-extension runtime spike results
• docs(roadmap): Docker-Extension MVP feasibility & architecture analysis
• docs(roadmap): record Docker-Extension brief