Document third-party dependency licenses

Author: ProfRandom92

THIRD_PARTY_LICENSES.md

@@ -0,0 +1,16 @@
+# Third-party licenses
+
+This document summarizes known third-party Rust dependencies used by the `agy7rust` crate.
+
+| Dependency | Declared license | Notes |
+|---|---|---|
+| anyhow | MIT OR Apache-2.0 | Rust error handling |
+| clap | MIT OR Apache-2.0 | CLI argument parsing |
+| serde | MIT OR Apache-2.0 | Serialization framework |
+| serde_json | MIT OR Apache-2.0 | JSON serialization |
+| sha2 | MIT OR Apache-2.0 | SHA-2 hashing |
+| hex | MIT OR Apache-2.0 | Hex encoding |
+
+Dependency licenses should be verified from `Cargo.lock` and upstream package metadata before a formal release.
+
+The Rust crate metadata currently declares `license = "MIT"` in `agy7rust/Cargo.toml`.