Feat v0.7.0 shell contract + surface audit + rebrand

Two-slot shell topbar (home, left, center, bell, user menu) with SDK API
(setLeft/setSlot/setTitle/hide/show). All 4 primary surfaces migrated:
Settings and Team Admin to Pattern B (flat tabs), Admin to Pattern C
(category tabs + sidebar), Docs to Pattern A (default).

Backend WS events: package.changed (broadcast), auth.changed (targeted),
notification.all_read. User menu re-fetches on package/auth changes.
Bell syncs read state across tabs.

Error handling pass with .sw-inline-error CSS primitive. Empty state
guidance for Admin Workflows/Groups. Announcement global dismiss via
localStorage. Rebrand assets deployed (both b/e icon variants, wordmarks,
full icon library). Docs outline scroll-to-heading fix.

Bug fixes: ICD security assertion tightened, workflow-demo error surfacing,
signoff display names, hello-dashboard + team-admin/groups.js deleted.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

CHANGELOG.md

@@ -2,6 +2,58 @@
 
 All notable changes to Armature are documented here.
 
+## v0.7.0 — Shell Contract + Surface Audit + Rebrand
+
+**Shell Infrastructure**
+- Kernel-injected two-slot topbar for all surfaces (home, left slot, center slot, bell, user menu)
+- `sw.shell.topbar` SDK API: `setLeft()`, `setSlot()`, `setTitle()`, `hide()`, `show()`
+- `.sw-topbar__tabs` / `.sw-topbar__tab` CSS classes for consistent tab styling
+- Shell topbar auto-mounts on extension surfaces via `#shell-topbar` div
+
+**Backend WS Events**
+- `package.changed` event broadcast on install/uninstall/enable/disable/update
+- `auth.changed` event targeted to affected user on team/group membership changes
+- `notification.all_read` event split from `notification.read` for cleaner badge sync
+- `Hub.Broadcast()` method for untargeted all-client events
+
+**User Menu + Bell Reactivity**
+- User menu re-fetches surface list on `package.changed` and `auth.changed` events
+- Notification bell syncs on `notification.read` and `notification.all_read` across tabs
+
+**Surface Migrations**
+- Settings: Pattern B (flat tabs in topbar, no sidebar, full-width content)
+- Admin: Pattern C (category tabs in topbar, surface-owned sidebar below)
+- Team Admin: Pattern B (flat tabs, no sidebar, Groups tab removed)
+- Docs: Pattern A (shell topbar auto-renders, removed explicit Topbar import)
+- All 4 surfaces now have notification bell and user menu via shell topbar
+
+**Error Handling + Empty States**
+- `.sw-inline-error` CSS primitive for inline error + retry pattern
+- `.sw-empty-state` CSS primitive for guided empty states
+- Admin Workflows, Packages, Groups: inline error on list fetch failure
+- Admin Workflows, Groups: descriptive empty state guidance
+
+**Announcement Global Dismiss**
+- Announcement dismiss state persisted to localStorage keyed by content hash
+- Dismissed once on any surface, dismissed everywhere
+
+**Rebrand Assets**
+- `favicon-light.svg` renamed to `wordmark.svg` (was a 520x80 wordmark, not an icon)
+- New `favicon-light.svg`: actual square light-mode icon
+- New `wordmark-dark.svg`, `wordmark-light.svg` for dark/light backgrounds
+- New `favicon-light-32.png`, `favicon-light-256.png` raster icons
+- Full icon library deployed to `src/icons/` (both b/e variants, animated SVGs)
+- `manifest.json` description updated to "Self-hosted extension platform"
+- Light-mode icon entries added to PWA manifest
+
+**Bug Fixes**
+- Docs: "On this page" outline links now scroll to headings (IDs were missing from rendered HTML)
+- ICD security tier: tightened path traversal assertion (400/422, not 409), added `finally` cleanup
+- Workflow demo: replaced silent catch with inline error + retry
+- Team Admin: signoff panel shows display names instead of raw UUIDs
+- Deleted `packages/hello-dashboard/` (dead package)
+- Deleted `team-admin/groups.js` (37-line dead-end, no CRUD)
+
 ## v0.6.18 — CI Bundle Wiring
 
 Wire `BUNDLED_PACKAGES` env var into the Gitea CI pipeline so each