chore(license): relicense to Apache-2.0, retract SSPL-era tags - #389

… root (#390)

* chore(license): complete Apache-2.0 sweep; root-document triage

Complete the sweep PR #389 missed: 127 tracked *.gen.go files, whose
headers come from the go.render templates in
star/extensions/.../templates/*.gen.go.template (skipped by the copyright
linter due to the .template extension). Fix the seven templates so
regeneration emits Apache-2.0, sweep the generated files to match, and
correct the two extensionless stragglers (.githooks/pre-commit,
.pre-commit-config.yaml). Remaining SSPL mentions are intentional: the
go.mod retract rationale and a linter test fixture.

Also lands the root-document triage (staged earlier by script): stale
snapshots deleted (GITHUB-ISSUES, CODE-CONSOLIDATION-ANALYSIS,
TEST_BREAKS, commit_msg.txt), sketches moved to docs/sketches/,
ARCHITECTURE-STATUS to docs/architecture/STATUS.md.

Assisted-by: Claude
Signed-off-by: David Noble <[email protected]>

* docs: rewrite README, add CONTRIBUTING with AI disclosure

README rewritten per licensing-readme-plan v0.2 §5.3: DevLore-first
framing (onboarding and roles above the fold, the Docker iceberg second),
honest current-binary naming with the devlore unification noted, install
paths that exist today, the genuine cross-platform statement including
the PowerShell provider, the registry relationship, Apache-2.0 stated
once, devlore.org links.

CONTRIBUTING.md added: Apache-2.0 §5 inbound terms with DCO sign-off,
and the AI-disclosure policy — assistance is welcome, must be announced
via Assisted-by trailer, is acknowledged never credited, and undisclosed
use is a permanent ban. go-style-guidelines.md mirrored from
noblefactor-ops (header rule corrected to Apache-2.0) so public
contributors can read the rules star lint enforces.

Assisted-by: Claude
Signed-off-by: David Noble <[email protected]>

---------

Signed-off-by: David Noble <[email protected]>
Co-authored-by: David Noble <[email protected]>

Two plan documents, landing after the work they describe.

docs/plans/fsroot-canonical-rel.md is issue #377's plan: rel canonical slash
form at every construction and decode site, abs OS-native, every non-test
Rel() consumer audited (two of them — walkDir and merkleRoot — were handing
native-form rel to io/fs APIs whose contract requires slash paths, so the fix
repaired them rather than risking them). Both rulings are recorded: existing
serialized documents are greenfield, and Abs()-class test expectations are
platform-correct rather than slash literals.

Its Outcome section records what actually happened: the implementation landed
inside PR #389 (the Apache-2.0 relicense) rather than as its own PR — it was
in-flight in the same working tree when the licensing sweep staged whole
directories, and the ruling was to merge with the entanglement disclosed in
the PR body rather than split commits or rewrite a shared branch. Issue #377
closed by that merge. Measured on #389's own windows test leg: 85 -> 57
failures, every fsroot/triad path assertion and TestRegistry_FilePaths
cleared, zero build failures. The attribution correction is recorded too: the
earlier ~50-of-85 estimate was wrong (the separator-direct share was 28), and
the surviving receipt/graph-resume round-trips have a second cause beyond
separator form — the first thing to read in the remaining-57 triage.

docs/plans/platform-test-matrix.md gains the corrected phase-2 baseline: with
the three formerly-[build failed] packages compiling on Windows (PR #388), the
honest count was 85, not 34 — the FAIL-line counting had silently excluded
three entire suites.

Documentation only; no code changes.
Issues: #377 (closed), #373

Co-authored-by: David Noble <[email protected]>

Issue #396. The relicense (#389) stamped Apache-2.0 headers onto the two
inventory.gen.go files, but make generate runs the generator under every build
and test, and the generator did not emit a header — so any make invocation
rewrote both files headerless, and the next commit that staged them would have
silently undone the relicense on those files. Observed in practice minutes
after #389 merged, and twice more since: every local build left both files
modified with exactly the header lines deleted, repaired by hand each time.

writeInventory now emits the SPDX and copyright lines itself, matching the
repository convention exactly so star lint copyright accepts regenerated
output unchanged. Same defect class, same remedy as the defaultGolangciConfig
template #389 already fixed: a generator whose output must carry the header
emits it from the template rather than relying on a one-time sweep.

Proven by regeneration: make generate now produces output byte-identical to
the committed files — the strip-restore cycle is dead. The committed
inventory.gen.go files need no change in this commit.

Verified: make vet, make lint-all, full make test green — zero FAIL or panic
lines by count; gofmt clean.
Issue: #396

Co-authored-by: David Noble <[email protected]>