Build(deps): bump node from 26.5-bookworm-slim to 26.7-bookworm-slim

[dependabot]

Bumps node from 26.5-bookworm-slim to 26.7-bookworm-slim.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Mission Control — Launch Readiness Report

Generated: 2026-08-12T01:33:38Z

Ready to launch: YES (warnings remain)

Result	Count
Critical gaps	0
Warnings	4
Passing	30
Total checks	34

Warnings (should fix before launch)

• Error tracking integration (Sentry / Bugsnag / Rollbar) — Wire up Sentry (or equivalent) for prod error visibility.
• Security headers / CSP applied — Use helmet (or equivalent) for HSTS, CSP, X-Frame-Options, etc.
• Privacy policy — Add a privacy policy (required if you handle PII).
• Terms of service — Add ToS before customers sign up.

Passing

• Application source code present
• Dependency manifest (package.json / pyproject.toml / requirements.txt / go.mod)
• Locked dependencies (lockfile present)
• README with setup + run instructions
• License file
• .env.example documenting required configuration
• .gitignore excludes secrets / build artifacts
• No committed secrets (.env, *.pem, credentials.json)
• Authentication implementation present
• Authorization / RBAC mention
• Database / persistence layer
• Database migrations directory
• Test suite present
• Linter configured
• Formatter configured
• Type checking configured
• Health check endpoint defined
• Structured logging present
• Metrics / tracing (OTel / Prometheus / Datadog)
• SECURITY.md (vuln disclosure policy)
• Dependabot / Renovate configured
• Rate limiting middleware
• Input validation library
• CSRF protection (for cookie-based auth)
• Dockerfile
• .dockerignore
• CI workflow defined
• AI provider integration (Anthropic / OpenAI)
• Marketing channel integrations (email / social / ads)
• Background jobs / queue (BullMQ, Celery, etc.)

---

Next steps: see LAUNCH_CHECKLIST.md for the full launch runbook.

[dependabot]

Superseded by #39.