chore(release): 1.7.0

[socket-release-bot]

Bumps package.json to 1.7.0 and moves the ## [Unreleased] notes under the 1.7.0 heading.

To release:

1. Review the CHANGELOG section and squash-merge this PR.
2. Dispatch Publish to npm registry on v1.x with dry-run: false. It tags the merge commit, cuts the GitHub release, and stages all three packages.
3. Approve each staged package with pnpm stage approve.

If v1.x moves before this merges, re-dispatch with mode: release-pr to rebuild the bump on the new tip.

---

Note

Low Risk
Version and changelog-only release PR with no runtime code changes.

Overview
Release 1.7.0 — bumps package.json from 1.6.2 to 1.7.0 and finalizes CHANGELOG.md by replacing ## [Unreleased] with a dated 1.7.0 section (2026-10-09).

That changelog entry captures what ships in this release: per-build Socket facts filenames for Maven/Gradle/sbt so shared directories do not overwrite each other, reachability scans no longer reusing stale .socket.facts.json, and Coana CLI 15.12.4. No application code changes in this PR—only version and release notes.

^{Reviewed by Cursor Bugbot for commit e34303f. Configure here.}

[Jeppe Fredsgaard Blaabjerg (jfblaa)]

[agent] Version and changelog match the derived 1.7.0 release; CI green.