licence(#7): normalise PMPL-1.0 -> PMPL-1.0-or-later (owner carve-out, SPDX-only) (#17)

Not a relicence; the licence is unchanged. This is a mechanical SPDX
identifier suffix fix only: bare 'PMPL-1.0' lacked the '-or-later'
qualifier that all files in this repo intend.

Owner-sanctioned per standards LICENCE-POLICY A8(1), authorised
2026-05-19. Refs LICENCE-DEBT-LEDGER-2026-05-18.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: CodeQL Security Analysis
 
 on:

.github/workflows/scorecard.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 name: OSSF Scorecard
 on:
   push:

.github/workflows/secret-scanner.yml

@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0
+# SPDX-License-Identifier: PMPL-1.0-or-later
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner