feat: complete local layer model v0.7 conformance work

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06eaf-3425-7f92-a0c2-bb4aa4faebe4

layer.yaml

@@ -1,6 +1,6 @@
 # ops-warden — NetKingdom security layer declaration
 #
-# Framework: net-kingdom/canon/standards/security-layer-model_v0.4.md
+# Framework: net-kingdom/canon/standards/security-layer-model_v0.7.md
 # Assent:    docs/adr/ADR-0010 (ops-warden's own voice, per §11 "who must declare")
 # Validate:  python3 scripts/check_layer_conformance.py
 #
@@ -14,7 +14,7 @@
 
 schema_version: "0.1"
 framework: netkingdom-security-layer-model
-standard_version: "0.4"
+standard_version: "0.7"
 repository: ops-warden
 layer: staff
 declared_by: docs/adr/ADR-0010