chore(release): 26.07.01

[ErikChevalier]

What & why

Release 26.07.01: bumps appVersionName (versionCode derives to 260701) and adds the CHANGELOG section covering the Google-style search operators, the served-page security hardening (CSRF Origin: null fix, CSP/no-store/Permissions-Policy, constant-time + header-based network token), the Material 3 served UI, and the dependency refresh (Lifecycle 2.11, Ktor 3.5.1, Gradle 9.6.1, CI actions).

Merging this and pushing the v26.07.01 tag triggers the signed build/publish pipeline in release.yml.

Relates to OpenSpec change: n/a (release chore)

Checklist

• Built on its own feat//fix/ branch off main
• ./gradlew ktlintCheck lint test assembleDebug is green locally — verified by CI on this PR (version/changelog change only)
• Added/updated tests (unit and/or instrumentation) — n/a, no code change
• No telemetry, trackers, or device identifiers added
• No Google scraping introduced
• Battery: no wake-lock held while idle
• OpenSpec change validates (openspec validate <name> --strict) and tasks are checked off — n/a

🤖 Generated with Claude Code

https://claude.ai/code/session_016AYAgNYmBkxsEYcgzSAjgT

---

Generated by Claude Code