2.7.0: ship osv-verdict + automerge-gate with fail-open guard

First tagged release of the osv-verdict and automerge-gate components
(previously in the Unreleased section). The gate blocks (exit 1) when
zero required checks were evaluated, so an empty or typo'd required-checks
no longer fail-OPENs to GATE GREEN.