Generate and enforce the reviewed .NET redistribution notice

[KeyffMS]

What changed

• replace the static repository copy of MICROSOFT-DOTNET-REDISTRIBUTION.txt with a reviewed template;
• add release/dotnet-redistribution-review.json as the machine-readable reviewed SDK/runtime/TFM/RID/publish scope, template checksum and professional-review status;
• generate the final package notice from canonical release metadata after exact-version .NET notice generation;
• fail early when SDK, runtime, target framework, RID, publish mode or reviewed template wording differs from the review record;
• validate every generated redistribution header inside the final ZIP;
• add a negative package case that deliberately changes the runtime version and must be rejected;
• retain the redistribution review date/status and generated-notice SHA-256 in the compliance report;
• update packaging, build and legal documentation.

Root cause

The previous package copied a static notice whose version and publish-configuration lines were not checked by the release gate. A later SDK/runtime or publish-setting change could therefore produce a valid-looking archive with stale redistribution wording.

Scope

Release packaging, compliance automation and documentation only. SightAdapt application behavior and application tests are unchanged.

Professional review

The review record explicitly remains not-obtained and linked to #93. This PR completes the technical P0 portion of #84 but does not represent or fabricate counsel sign-off. Production and paid distribution remain blocked.

Addresses #84.