chore(deps): bump Lemonade Server to v10.7.0

[github-actions]

Bumps the pinned Lemonade Server from v10.2.0 to v10.7.0. GAIA's installer and CI derive the Lemonade download URLs from LEMONADE_VERSION in src/gaia/version.py, so users running gaia init and the bundled desktop installer pick up the new release.

Notable in v10.7.0 (from the Lemonade release notes):

• LMX-Omni multimodal models now work with any OpenAI-compatible app, plus server-side Omni orchestration for /chat/completions.
• New lemonade bench command for apples-to-apples LLM benchmarking across llama.cpp, FastFlowLM, vLLM, and Ryzen AI SW.
• Broader GPU coverage: llama.cpp CUDA on Windows/Linux, stable-diffusion.cpp CUDA on Linux and Vulkan on Windows/Linux; Linux ARM64 CPU/Vulkan backends.
• New native Prometheus metrics endpoint for real-time stats monitoring.
• Several security hardening fixes (path-traversal in /web-app/ and NPU cache download, prompt-injection in markdown links) and per-download SHA verification.
• New models added: Gemma 4 12B and LFM2.5-8B-A1B.

⚠️ Heads-up — breaking change in v10.7.0: the deprecated lemond configuration environment variables were removed (use lemonade config instead). GAIA's own LEMONADE_* vars (LEMONADE_BASE_URL, LEMONADE_HOST, LEMONADE_PORT, …) are client-side connection settings and appear unaffected by this version bump, but a reviewer should confirm GAIA doesn't pass any removed server-side lemond env vars when launching/managing the server. No GAIA code change is included here for this; flagging for manual verification.

Test plan

• CI green (lint + unit tests)
• gaia init downloads Lemonade v10.7.0 successfully
• Review the Lemonade release notes for breaking changes (default port, min ctx, API) that may need follow-up in GAIA beyond this version bump

[github-actions]

🟡 docs/docs.json:498 — navbar label still shows Lemonade 10.2.0 while every other reference in this PR was bumped to 10.7.0.

        "label": "v0.20.1 · Lemonade 10.7.0",

One-liner fix; otherwise the docs site navbar will advertise the wrong version after this merges.

[github-actions]

🟡 src/gaia/installer/init_command.py:103 — NPU profile min_lemonade_version wasn't updated

docs/guides/npu.mdx now says Lemonade v10.7.0+ is required, but the npu profile (and all seven other profiles) in INIT_PROFILES still gate on "10.2.0". A user with v10.2.0–v10.6.x installed will hit the "meets minimum" path and skip the upgrade prompt, but then fail at runtime if 10.7 is genuinely required.

    "npu": {
        ...
-        "min_lemonade_version": "10.2.0",
+        "min_lemonade_version": "10.7.0",

If the other profiles also need 10.7.0 features they should be updated too; at minimum the npu profile should match the docs.