[codex] Draft sbom-diff-and-risk v0.7.0 release notes

[stacknil]

Brief Design Summary

This PR adds draft sbom-diff-and-risk v0.7.0 release notes focused on consumer integration usability.

The draft captures the current v0.7 direction:

• summary-json CI cookbook
• checked-in sample-summary.json
• GitHub Actions consumer example
• local summary.json thresholding
• GitHub Release wheel installation path
• production PyPI intentionally deferred

This PR only drafts release notes. It does not bump package version, create a tag, create a GitHub Release, publish to PyPI/TestPyPI, or change runtime behavior.

Files Changed

• tools/sbom-diff-and-risk/RELEASE_NOTES_v0.7.0.md

Validation

• git diff --check passed.
• Confirmed relative link targets exist.
• Confirmed package version remains 0.6.0.
• Confirmed no workflow files changed.
• No Python tests run because this is docs-only.

Out of Scope

• No runtime behavior changes
• No CLI behavior changes
• No workflow changes
• No package version bump
• No tag or GitHub Release
• No PyPI/TestPyPI publishing
• No production PyPI workflow