feat(security): release v0.7.0 with comprehensive security hardening (S-01 to S-11)

tests/sync_test.rs

@@ -15,8 +15,8 @@ fn create_test_container(path: &Path) -> (Database, [u8; 32]) {
     let db = Database::open(path).expect("Open database");
     let salt = generate_salt();
     let kdf_params = KdfParams {
-        memory_cost: 1024,
-        time_cost: 1,
+        memory_cost: sanctum::crypto::MIN_MEMORY_COST_KIB,
+        time_cost: sanctum::crypto::MIN_TIME_COST,
         parallelism: 1,
     };
     let kek = derive_kek("sync_password", &salt, &kdf_params).unwrap();