plugins/governance/v1.7.1

## Plugin Release: governance v1.7.1

- feat: add the project dimension to governance context and permit evaluation, refusing requests that name a project outside their scope (#6702)
- feat: resolve every request onto a single grant so limit assembly, enforcement and billing use one resolved access, and replace the per-VK MCP server map with `MCPGatewayAdmitter` admission (#6308, #6311, #6313, #6314, #6643, #6649, #6706, #6724, #6725)
- feat: add virtual MCP support with VK assignments, slug endpoints and the explicit tool whitelisting convention, and stop serving disabled MCP clients (#6746, #6748, #6749, #6750, #6791, #6826, #6872)
- feat: add `allow_all_providers` on virtual keys (#6662)
- feat: add `ScopedModelLimits`, `ProviderScopedModelLimitsInScope` and the split `GlobalProviderLimits`/`PermitModelLimits` primitives so provider-scoped budgets take part in load-balancing candidate exclusion (#6729, #6800, #6810, #6856)
- feat: rename `AllowOnAllVirtualKeys` to `AllowByDefault` with backward-compatible aliases (#6642)
- feat: honour the rotation grace-period previous value in virtual key auth (#5439)
- feat: require auth for realtime connections when enforced on inference (#6759)
- feat: replace user-scoped model configs with `ExtraScopedIDsResolver` (#6715)
- feat: add semantic complexity routing hooks and cachemetadata renames (#6164, #6166, #6177, #6722)
- feat: add a focused usage snapshot for cheaper accounting reads (#6683)
- fix: apply rate limits on model-less passthrough requests (#6774)
- fix: honour `allowed_models: ["*"]` when the synced catalog is empty (#6767)
- fix: update job accounting for the provider job table (#6673, #6674)

### Installation

```bash
# Update your go.mod to use the new plugin version
go get github.com/maximhq/bifrost/plugins/governance@v1.7.1
```

---
_This release was automatically created from version file: `plugins/governance/version`_