docs(roadmap): v7.0.1 — flip silent-fix entries, fold in post-2026-04-23 work

[pcalnon]

Summary

v7.0.1 hotfix update of the Implementation Roadmap, driven by the
2026-05-05 audit and the
"fuller revision" answer to Q1 of the audit's open questions.

Changes

• Header: 7.0.0 (2026-04-23) → 7.0.1 (2026-05-05), with status
  note pointing at the new sections and the audit doc.
• New §2.1 "v7.0.0 → v7.0.1 deltas" — rolled-up table with
  pointers into the body.
• §5 silent-fix flips — ~9 entries marked ✅ with PR/file/SHA
  references where verified by the audit (BUG-CC-02, -11, -15, -18;
  BUG-CN-01, -09, -11; BUG-JD-02, -03, -07). Plus BUG-CC-12 ✅
  (cascor refactor(observability): self-migrate to register_or_reuse helpers (Phase 1) #228 hotfix from this wave) and BUG-JD-10 ⚠️ partially
  fixed in data test: add fork-session alias normalization coverage #90 with the rest deferred to the async-route
  audit hook plan.
• CAN-015 row at line ~5150 flipped from "deferred" to ✅ Shipped
  end-to-end.
• New §28 "Recently Shipped" with 7 subsections:
  • 28.1 — CAN-015g (8 PRs) + CAN-015h (7 PRs) + 5 hardening
    follow-ups + 2 v7.0.1 hotfix PRs
  • 28.2 — Observability audit phase (27 items, 6 P1)
  • 28.3 — METRICS-MON R4.x ecosystem instrumentation
  • 28.4 — obs-wire-01/02 + obs-route-01
  • 28.5 — CVE-2026-3219 ecosystem mitigation
  • 28.6 — Hotfix archaeology (P-1 through P-9 markers)
  • 28.7 — Process recommendations to prevent future drift

Pairs with

The v7.0.1 hotfix wave consists of these PRs landing concurrently:

• juniper-cascor #228 — BUG-CC-12 fix
• juniper-data #90 — BUG-JD-10 partial fix
• juniper-ml #222 — async-route audit hook migration plan
• this PR — roadmap update

Test plan

• `util/check_doc_links.py --exclude templates --exclude history`
  passes (354 files).
• Pre-commit doesn't lint `notes/` markdown; no other code touched.
• Final size 15,220 lines (was 15,094 — +126).

🤖 Generated with Claude Code

[pcalnon]

approved