chore: oss-readiness follow-ups: DeepFlow NOTICE, manifest image tag, DCO policy

CONTRIBUTING.md

@@ -65,3 +65,7 @@ main Dockerfile only runs `go build` and will not rebuild eBPF for you.
 By submitting a contribution you agree to license your changes under
 the same terms as the project: Apache-2.0 for Go code, GPL-2.0 for
 eBPF C code.
+
+No Developer Certificate of Origin (DCO) sign-off or Contributor
+License Agreement (CLA) is required — opening a pull request is taken
+as acceptance of the above.

NOTICE

@@ -13,5 +13,11 @@ The eBPF C code under ebpftracer/ebpf/ is distributed under the
 GNU General Public License, Version 2.0. See LICENSES/GPL-2.0.txt for
 the full text.
 
+Portions of the eBPF C code under ebpftracer/ebpf/ (socket-info
+extraction and Go TLS/gRPC file-descriptor discovery) were informed by
+techniques from the DeepFlow project
+(https://github.com/deepflowio/deepflow), Copyright Yunshan Networks,
+licensed under the Apache License, Version 2.0.
+
 This product includes software developed by third parties; see go.sum
 for the complete list of Go module dependencies and their licenses.

manifests/nudgebee-node-agent.yaml

@@ -35,10 +35,10 @@ spec:
       hostPID: true
       containers:
         - name: nudgebee-node-agent
-          # Pinning to a major-version tag keeps deploys deterministic
-          # within a compatible range. For production, pin to a fully
-          # qualified semver tag (e.g. :1.2.3).
-          image: ghcr.io/nudgebee/node-agent:1
+          # Pinned to a fully qualified semver tag (x.y.z) for
+          # reproducible deploys. Bump to a newer release tag to upgrade;
+          # see the GitHub releases / GHCR for available versions.
+          image: ghcr.io/nudgebee/node-agent:0.1.0
           imagePullPolicy: IfNotPresent
           args: ["--cgroupfs-root", "/host/sys/fs/cgroup"]
           ports: