v0.0.7 evidence precision

[Shakargy]

v0.0.7 evidence precision

Fixes the remaining evidence-precision issues found in the v0.0.6 re-review. Narrow patch — no new product surface, repo stays private, not a public release.

• Tightens Billing Webhooks to local payment-provider evidence. Calendar subscriptions, cron cleanup, connector/credential webhooks, and generic triggers are negative contexts and no longer become Billing Webhooks without local Stripe/PayPal/payment evidence. "subscription"/"customer" alone no longer count. (Cal.com-style.)
• Prevents high-confidence Authentication from weak keyword evidence. session_id traces, NEXTAUTH_URL permalink tests, and authorship/capitalization words are filtered out before they can drive headline evidence; high confidence requires direct auth evidence. (Langfuse-style.)
• Makes Context Pack reasons truthful. "Same module" → "same directory" (only with real path locality); tests that import the implementation say "imports or tests the implementation"; weak keyword candidates are labeled weak.
• Blocks employment job-title/role taxonomy from Background Jobs. (Twenty-style.)
• Links direct bg_tasks tests to Background Jobs with an import-based reason, instead of "no behavior-specific tests found". (Plane-style.)
• Corrects private package version away from 0.1.0 → 0.0.7 (0.1.0 reserved for public release). CLI, pyproject, and PROOF updated.
• Adds fixtures/tests — 4 new scan fixtures (calendar cleanup, connector webhook, employment job-role, bg_tasks attachment) and new integration tests for auth headline precision, truthful context reasons, bg_tasks import reason, and version.

Tests

67 → 77 passing.

Scope

No UI / cloud / MCP / AI / git-history / ontology expansion. Repo remains private.

Do not merge or tag automatically — waiting for approval.