Align declared licensing surface with reconciled package and repository policy

[midiakiasat]

Summary

• align repository license files to the reconciled licensing policy
• align package metadata license fields where package.json exists
• add privacy-focused .gitignore only where missing in governed repos that required it

Scope

• no feature expansion
• no sovereignty or topology rewrite
• no package version bump
• no release publication in this change

Verification

• local governed repo inventory frozen against the 34-repo target
• local license-kind scan green after correction
• local package license metadata green after correction
• public repo license presence verified
• public repo license-kind mismatch set isolated to the intended correction repos
• npm historical red versions deprecated before corrected future release work

Intent

This PR is a surface-alignment correction so repository, package, and declared licensing policy do not continue to diverge.

[verifrax-systems]

Reviewed and approved for licensing surface reconciliation.

[verifrax-systems]

Reviewed and approved for licensing surface reconciliation.

The merge-base changed after approval.

[verifrax-systems]

Reviewed and approved for licensing surface reconciliation.