1.0.0 — the first open-source release

The first open-source release, under the MIT License. 1.0 carries everything up to 0.4.7, plus the
changes below.

Security

• A new release signing key. cosign.pub is a new ECDSA P-256 key, made in the OpenSSL FIPS
  provider, that verifies every release from 1.0.0 on. cosign-2026-09.pub is removed, along with
  the private-era images it verified.

Changed

• The shipped tracker profiles describe sensor kinds, not named platforms. Three
  platform-class GMTI profiles are removed. gmti-wide-area and gmti-high-clutter cover GMTI.
  The maritime MTI profile is now maritime-mti (Maritime surface MTI (generic)), with the same
  settings and the track key prefix M. A source whose tracker stage loaded a removed profile
  keeps its settings, which are saved in the source's own pipeline.
• OpenTrack is open source under the MIT License (LICENSE). Third-party components keep
  their own licenses, listed in THIRD_PARTY_NOTICES.md. The image carries the license at
  /opt/opentrack/LICENSE.
• A shorter README, with the detail moved to docs/reference.md, and a project website in
  docs/pages published to GitHub Pages.
• The UI depends on @kineticlogic/staresdk from npm (stareSDK,
  MIT) instead of a vendored build. ui/vendor/ and scripts/vendor-staresdk.sh are gone.
• The SAPIENT demo's compose file moved to docs/examples/sapient/docker-compose.yml, with its
  Mosquitto configuration beside it.
• The repository moved to kineticlogic-io/OpenTrack (a GitHub transfer: issues, pull
  requests, releases and collaborators kept; the old URL redirects). Release images from the next
  release on are ghcr.io/kineticlogic-io/opentrack. Images and releases from before the project
  was open source have been withdrawn.