feat(security): release v0.7.0 with comprehensive security hardening (S-01 to S-11)

tests/live_crash_resilience_test.rs

@@ -28,8 +28,8 @@ async fn test_live_crash_and_recovery_stress() {
     let password = "LiveStressPassword2026!";
     let salt = generate_salt();
     let kdf_params = KdfParams {
-        memory_cost: 1024,
-        time_cost: 1,
+        memory_cost: sanctum::crypto::MIN_MEMORY_COST_KIB,
+        time_cost: sanctum::crypto::MIN_TIME_COST,
         parallelism: 1,
     };
     let kek = derive_kek(password, &salt, &kdf_params).expect("KEK derivation");