Bump agent-gov-core ^0.5.0 -> ^0.7.0

v0.7.0 adds report envelope, mergeFindings, OTel
gen_ai.conversation.id interop, matchSecret, applyExceptions.
Lockfile only on this branch — leaving the action-bundle rebuild
for when the widen-bypass-closures feature work lands.

Author: Conalh

package-lock.json

@@ -12,7 +12,7 @@
     "test": "node --test test/*.test.mjs"
   },
   "dependencies": {
-    "agent-gov-core": "^0.5.0"
+    "agent-gov-core": "^0.7.0"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",