Replace external audit gates with maintainer risk decisions

[KeyffMS]

Decision

SightAdapt will not plan or require external legal, trademark, patent, privacy/DPO or medical-device audits. Maintainers make documented release and business-risk decisions using repository evidence and public sources.

What changed

• replace formal counsel sign-off with a maintainer release-risk gate and template;
• add an internal release decision for the current 0.5.0.50-alpha GitHub/OSS scope;
• replace external patent FTO requirements with internal public-source patent-risk review and scope controls;
• make the non-medical/general-purpose position a permanent maintained scope rather than a trigger for external classification work;
• reconcile the trademark record as a medium-high internal risk accepted by the publisher, with monitoring and rename triggers;
• remove professionalReview from the .NET redistribution review schema, generated notice, package validator and compliance report;
• retain strict SDK/runtime/TFM/RID/template matching, negative stale-package tests and final ZIP validation;
• update README, build, packaging, release and documentation indexes.

Boundaries

This policy does not claim that internal review equals professional advice. Public materials remain prohibited from claiming legal clearance, patent freedom to operate, non-infringement, trademark availability, MDR approval or professional audit.

Issue follow-up

After merge, #84, #88, #89 and #93 can be closed under the maintainer-owned policy. #90 will be treated as an internal public-source review triggered by a defined commercial scope, not an external opinion requirement.

Closes #138.