Add RootFS license/NOTICE candidate review results

[jacklv-coder]

Summary

• record checksum-bound engineering review results for all 75 external RootFS LICENSE/NOTICE candidate payloads
• add a strict validator with optional exact bundle-tree verification and CI coverage
• integrate the result into generated compliance evidence and bilingual release documentation
• close candidate-material engineering items for 2 origins, retain 6 open origins and keep package completeness, legal, redistribution, and corresponding-source gates closed

Verification

• ./Scripts/check-docs.sh
• RootFS Ruby validator/test suites, including 11 runs / 34 assertions for the new result validator
• real 75-payload external bundle verification (a54935ff29aa4f9784a74f26733bd915f8e6750e8487138af3f17a9389b93d30)
• compliance generator reproducibility and SHA256SUMS verification
• swift test (139 tests, 1 expected environment-gated skip, 0 failures)
• codex review --uncommitted

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f3e148d30b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".