License normalisation: docs → CC-BY-SA-4.0; remove residual PMPL (#234)

Owner-directed licensing normalisation (two steps you approved: "sweep
1, then do 2"). Surgical, per-file, **no code or third-party text
touched**. Draft for your review.

## 1. Relicense documentation MPL-2.0 → CC-BY-SA-4.0 (`64cd25d`)
Code stays **MPL-2.0**; prose documentation becomes **CC-BY-SA-4.0**.

- **598 docs** relicensed via a per-file SPDX-header change (518 `.adoc`
+ 80 `.md`), **including AI-agent files** (CLAUDE.md, PROJECT.md,
copilot-instructions) per your choice. Only the
`SPDX-License-Identifier` header line changed.
- Deleted stale **GEMINI.md** (Hypatia `root_hygiene` flag).
- **Excluded / unchanged:** all source code (zig/idris/js/ex/…); the
third-party **Contributor-Covenant** `CODE_OF_CONDUCT.md` (×2); the
`LICENSES/` texts; the `pmpl-mcp` cartridge.
- **Self-correction:** the sweep initially also flipped SPDX strings
inside *code examples* in 6 docs (zig/nickel snippets, the "every source
file" convention, the OSI-approved cartridge requirement, the RSR
project-license section). Those describe **code** and were restored to
MPL-2.0 — only document *headers* are CC-BY-SA-4.0.

## 2. Remove residual PMPL artifacts (`e2bfd68`)
boj-server is MPL-2.0 / CC-BY-SA-4.0 — removed Palimpsest-MPL residue
that still declared/enforced PMPL here.

- **Deleted:** `LICENSES/PMPL-1.0-or-later.txt`,
`LICENSES/EXHIBIT-A-ETHICAL-USE.txt`,
`LICENSES/EXHIBIT-B-QUANTUM-SAFE.txt`,
`coord-tui/LICENSE-PMPL-1.0-or-later.txt`.
- **Edited:** `NOTICE` (dropped the "voluntarily adopts PMPL"
paragraph), `docs/index.html` (PMPL header/badge/footer → MPL-2.0 +
CC-BY-SA-4.0), `.well-known/humans.txt` + `ai.txt` (dropped PMPL drift).

### ⚠️ Residue found *beyond* the original flag — please eyeball these
hunks
I found these still asserting PMPL and fixed them; revert any you
disagree with:
- **`Mustfile`** — invariants + the LICENSE grep-check no longer require
`"Palimpsest-MPL 1.0"`. Note this check (`grep -q "Palimpsest-MPL 1.0"
LICENSE`) was **already failing** against the MPL-2.0 LICENSE; now it
checks `"Mozilla Public License"`.
- **`Intentfile`** — AI-agent invariant now references MPL-2.0.
- **`docs/RSR_OUTLINE.adoc`** — PMPL badges → MPL-2.0 badge; removed
deleted-EXHIBIT entries from the file tree.
- **`docs/outreach/show-hn-post.md`** — "PMPL-licensed (MPL-2.0
fallback)" → "MPL-2.0-licensed".

### Kept (legitimate — *subject matter*, not a licence declaration)
`pmpl-mcp` cartridge, `catalog.json`, README catalogue entry, topical
federation/provenance references, and the `consent-aware-http` "PMPL
applies prospectively" note (correct per estate policy — it's one of the
three PMPL carve-out repos).

### One borderline item left untouched (your call)
`.machine_readable/svc/self-validating/examples/setup-repo.k9.ncl` has
an example k9 step *"Add PMPL-1.0 license"* (fetches from the `pmpl`
repo). It's a framework **example fixture**, not boj-server's own
licence — I left it. Say the word if you want it changed.

---
Verified: zero PMPL SPDX headers remain; zero broken references to
deleted files; `LICENSES/` reduces cleanly to `MPL-2.0.txt` +
`CC-BY-SA-4.0.txt` + `README.adoc`.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---
_Generated by [Claude
Code](https://claude.ai/code/session_01XrPAh7eBSUcVKauTVdXH9Y)_

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.claude/CLAUDE.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # CLAUDE.md - AI Assistant Instructions

.claude/PROJECT.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # BOJ Server - Claude Code Instructions

.devcontainer/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 = Dev Container Usage
 :author: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>

.github/CICD-CHANGES-2026-06-04.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 

.github/CONTRIBUTING.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Contributing to boj-server

.github/GOVERNANCE.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Project Governance

.github/SECURITY.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 # Security Policy

.github/copilot-instructions.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 <!-- Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk> -->

.github/pull_request_template.md

@@ -1,5 +1,5 @@
 <!--
-SPDX-License-Identifier: MPL-2.0
+SPDX-License-Identifier: CC-BY-SA-4.0
 Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 -->
 ## Summary

.machine_readable/6a2/README.adoc

@@ -1,4 +1,4 @@
-// SPDX-License-Identifier: MPL-2.0
+// SPDX-License-Identifier: CC-BY-SA-4.0
 // Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # A2ML 6a2 Directory