chore(deps): upgrade @objectstack to 9.7.0 and bump ObjectOS One to 9.7.0

[os-zhuang]

Upgrade

Bump all @objectstack/* deps in @objectos/server from ^8.0.1 to ^9.7.0 and refresh the lockfile (all resolve to 9.7.0).

9.0 is a major, but the break is on the authoring surface, not the runtime. The 9.0 breaking changes are the analytics single-form cutover + chart-taxonomy prune (ADR-0021) in @objectstack/spec. createStandaloneStack({ artifactPath, environmentId, databaseUrl }) is byte-for-byte the same contract across 9.x (verified against packages/runtime/src/standalone-stack.ts), so apps/objectos/objectstack.config.ts needs no migration.

ObjectOS One bumped to 9.7.0 across package.json, tauri.conf.json, Cargo.toml (via sync-version) and the Cargo.lock objectos-one entry.

Verification

• pnpm --filter @objectos/server type-check ✓
• pnpm smoke:runtime ✓ — boots clean on 9.7.0, server ready, HTTP serving.
• One non-fatal log line: the new 9.5 notification-retention prune runs against a fresh DB before sys_notification exists (cosmetic, framework-side; the server still reaches ready and passes the health probe).
• apps/docs type-check (fumadocs-mdx + next typegen + tsc) ✓ across English + all translations.

Docs

Scanned the framework changelogs (8.0.1 → 9.7.0) and the recent docs-vs-implementation sync, then updated the official site to match the real surface. 10 English pages + 60 translations (de/es/fr/ja/ko/zh-Hans).

• changelog — new 9.x highlights train (analytics datasets, stricter os compile validation, number-field formulas, REST apiEnabled/apiMethods, book navigation, os package install, approvals, webhook triggers, notification retention, bundled AI SDKs) + refreshed version/support tables.
• environment-variables — new Observability section (OS_OBS_EXPORTER / OS_OTLP_ENDPOINT, replacing the wrong OTEL_EXPORTER_OTLP_ENDPOINT) and a settings-namespace OS_<NS>_<KEY> override section.
• Confirmed factual fixes mirroring the framework's recent doc sync:
  • observability — correct OTLP env vars (opt-in noop default).
  • cel — invalid expressions no longer fail silently (os compile fails / runtime throws).
  • data-model / glossary / storage — dead field-type names attachment→file, rollup→summary, autoNumber→autonumber.
  • field-types — new secret type + trackHistory (ADR-0052) replacing the pruned auditTrail/encryptionConfig/maskingRule.
  • rest-api / api-access — object-level REST gating (apiEnabled / apiMethods, ADR-0049, now enforced) + /api/v1/discovery alias.

🤖 Generated with Claude Code