Include license, notice, and attribution material in every release artifact

[Vonng]

Summary

An isolated GoReleaser snapshot produced all expected binaries and DEB/RPM/APK packages, but package inspection found only:

• the Console binary;
• the compatibility systemd unit;
• the environment file.

LICENSE, NOTICE, and CREDITS were not included. The scratch container also carries only the binary.

Impact

Public AGPL distribution should carry the license and preserved attribution material with the actual artifact. Linking to a moving main branch from the UI is not an artifact-local substitute and may not identify the corresponding source revision.

Acceptance criteria

• Include LICENSE, NOTICE, and CREDITS in DEB, RPM, APK, binary release bundles where applicable, and container metadata/filesystem.
• Preserve compatibility copyrights and fork attribution.
• Update CREDITS to account for the maintained fork dependencies consumed by the binary.
• Link corresponding source to the immutable release tag or commit rather than only main.
• Add package-content tests for every supported format.
• Add a container-content/metadata test.
• Confirm the final artifacts remain AGPL-3.0-or-later compliant before publication.