License: comprehensive PMPL residue scrub (#236)

Final, comprehensive pass over the remaining PMPL mentions (the "item 2"
you asked me to deal with thoroughly). boj-server is MPL-2.0 (code) /
CC-BY-SA-4.0 (docs). 4 files.

## Scrubbed (residual PMPL on an MPL-2.0 repo)
- **`src/abi/Boj/Federation.idr`** — reworded the module doc-comment:
*"PMPL provenance metadata is the legal expression of attestation"* →
*"Signed provenance metadata complements the hash attestation."*
**Comment only — no code/logic change.**
- **`.machine_readable/svc/self-validating/examples/setup-repo.k9.ncl`**
— the generic repo-setup example added **PMPL-1.0** to *any* repo
(misleading, since estate default is MPL-2.0 and PMPL is only for 3
specific repos). Changed to add **MPL-2.0** from the canonical
mozilla.org text.
- **`.machine_readable/servers/menu.a2ml`** — attestation `format =
"PMPL-provenance-v1"` → `"boj-provenance-v1"`.
- **`.machine_readable/servers/order-ticket.a2ml`** — dropped "PMPL"
from the provenance comment; renamed the `(pmpl-provenance #t)` security
field to `(provenance #t)`.

### ⚠️ Machine-readable identifiers — eyeball these two
`menu.a2ml`'s format string and `order-ticket.a2ml`'s field are protocol
identifiers. **Nothing else in the repo references them by name**
(verified), but if an external/downstream consumer keys on the old
strings, revert those two hunks.

## Kept on purpose (legitimate — not a licence declaration)
The `pmpl-mcp` cartridge + its catalogue/`abi-drift` entries (product
*about* the licence), the `LICENSES/README` carve-out note,
`contractile.just`'s generic license-keyword grep, and the
`consent-aware-http` "PMPL applies prospectively" note (correct estate
policy).

After this, the only PMPL strings left in the tree are those legitimate
references.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---
_Generated by [Claude
Code](https://claude.ai/code/session_01XrPAh7eBSUcVKauTVdXH9Y)_

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/servers/menu.a2ml

@@ -344,7 +344,7 @@
 # ═══════════════════════════════════════════════════════════════════════════
 
 @attestation:
-  format    = "PMPL-provenance-v1"
+  format    = "boj-provenance-v1"
   algorithm = "Ed25519+Dilithium5"
   signature = "PLACEHOLDER"
   timestamp = "2026-03-08T00:00:00Z"

.machine_readable/servers/order-ticket.a2ml

@@ -100,12 +100,12 @@
   ; Community nodes additionally verify:
   ; - Binary hash matches canonical build (Attested proof in Federation.idr)
   ; - Cartridge hashes match the menu attestation
-  ; - PMPL provenance chain is intact
+  ; - provenance chain is intact
 
   (security
     (session-timeout-seconds 3600)
     (sandbox-cartridges #t)
     (require-agent-identity #f)    ; optional but recommended
     (audit-log #t)
-    (pmpl-provenance #t))
+    (provenance #t))
 )

.machine_readable/svc/self-validating/examples/setup-repo.k9.ncl

@@ -130,9 +130,9 @@ K9!
     },
 
     "add-license" = {
-      description = "Add PMPL-1.0 license",
+      description = "Add MPL-2.0 license",
       commands = [
-        "curl -sL https://raw.githubusercontent.com/hyperpolymath/pmpl/main/LICENSE -o LICENSE",
+        "curl -sL https://www.mozilla.org/media/MPL/2.0/index.txt -o LICENSE",
         "echo '✓ License added'",
       ],
     },

src/abi/Boj/Federation.idr

@@ -13,7 +13,7 @@
 |||   - Gossip protocol for node discovery (Byzantine fault tolerant)
 |||   - Hash attestation ties binary to canonical build
 |||   - Load-aware routing sends requests to healthy nodes
-|||   - PMPL provenance metadata is the legal expression of attestation
+|||   - Signed provenance metadata complements the hash attestation
 module Boj.Federation
 
 import Data.List