fix(rsr-audit): LICENSE checks expect MPL-2.0 (owner-approved follow-up to #390) (#433)

## Summary

Discharges the licence-guardrail flag that **#390** raised and
explicitly
left for the owner:

> 🔒 Flagged for owner (NOT changed — licence guardrail): `rsr-audit.sh`
> hardcodes `MIT AND Palimpsest` as the required LICENSE content, which
> contradicts the estate's MPL-2.0-for-sole-owner policy. Updating what
> licence the standard mandates is an owner decision — left as-is.

The owner has now approved the change (MPL-2.0 for code, CC-BY-SA-4.0
for
prose docs, per estate policy). This PR makes only that one owner-gated
edit.

## Change

`rsr-audit.sh` Category-2 (documentation) and Category-7 (licensing)
checks previously required every **audited** repo's LICENSE to contain
`MIT` + `Palimpsest` with `SPDX-License-Identifier: MIT AND Palimpsest`.
Under the estate's five-way licence policy, sole-owner repos are
**MPL-2.0** and the Palimpsest carve-out is reserved for exactly three
repos (`palimpsest-license`, `palimpsest-plasma`, `consent-aware-http`).
So every correctly-MPL-2.0 repo was failing two licensing criteria.

Both checks now:
- expect **`Mozilla Public License`** + **`SPDX-License-Identifier:
MPL-2.0`**;
- accept either **`LICENSE`** or **`LICENSE.txt`** (matching #390's
bare-`LICENSE` tolerance).

## Not touched (deliberate)

- The RSR toolkit's **own** header `# SPDX-License-Identifier: MPL-2.0
AND
  Palimpsest-0.8` (line 2) is the framework's intentional dual-licence —
  it is the auditing tool's licence, not an audited target. Unchanged.
- No SPDX header was swept anywhere; this is a single logic edit to the
  audit script's expectations, per the per-file / no-bulk-sweep mandate.

## Effect

Removes two false-negative licensing failures from the self-audit of
every
correctly-MPL-2.0 estate repo, nudging Bronze scores upward across the
board without changing any audited repo's actual licence.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_019awZjBD1qx61tvmEuEKNpn

---
_Generated by [Claude
Code](https://claude.ai/code/session_019awZjBD1qx61tvmEuEKNpn)_

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/REGISTRY.a2ml

@@ -216,7 +216,7 @@ name = "RSR — Rhodium Standard Repositories"
 stream = "governance"
 home = "rhodium-standard-repositories/"
 canonical_doc = "rhodium-standard-repositories/README.adoc"
-source_hash = "sha256:830dca99ac78da5834a0f796da50bc4e3a1874782206347141530f6db49e3b97"
+source_hash = "sha256:2d4e465bee215808306f28053a84d2f146a7fb7f6e6e3780e5d6f4c1d18c7404"
 route = "the repository-compliance standard every repo is graded against"
 
 [[spec]]

rhodium-standard-repositories/rsr-audit.sh

@@ -226,11 +226,14 @@ audit_category_2_documentation() {
     check_file_exists "MAINTAINERS.md" "MAINTAINERS.md present"
     check_file_exists "CHANGELOG.md" "CHANGELOG.md present"
 
-    # LICENSE.txt validation
-    if [[ -f "$REPO_PATH/LICENSE.txt" ]]; then
-        check_file_contains "LICENSE.txt" "SPDX-License-Identifier" "LICENSE.txt has SPDX identifier"
-        check_file_contains "LICENSE.txt" "MIT" "LICENSE.txt includes MIT license"
-        check_file_contains "LICENSE.txt" "Palimpsest" "LICENSE.txt includes Palimpsest license"
+    # LICENSE validation — estate policy: sole-owner repos are MPL-2.0
+    # (accept `LICENSE` or `LICENSE.txt`).
+    local _license=""
+    [[ -f "$REPO_PATH/LICENSE.txt" ]] && _license="LICENSE.txt"
+    [[ -z "$_license" && -f "$REPO_PATH/LICENSE" ]] && _license="LICENSE"
+    if [[ -n "$_license" ]]; then
+        check_file_contains "$_license" "SPDX-License-Identifier" "LICENSE has SPDX identifier"
+        check_file_contains "$_license" "Mozilla Public License" "LICENSE is MPL-2.0 (estate sole-owner policy)"
     fi
 
     # README validation
@@ -458,14 +461,13 @@ audit_category_7_licensing() {
     # License clarity
     check_file_exists "LICENSE.txt" "LICENSE.txt present (plain text, not LICENSE.md)"
 
-    if [[ -f "$REPO_PATH/LICENSE.txt" ]]; then
-        check_file_contains "LICENSE.txt" "MIT" "MIT license included"
-        check_file_contains "LICENSE.txt" "Palimpsest" "Palimpsest license included (ethical AI)"
-    fi
-
-    # SPDX identifier in LICENSE.txt
-    if [[ -f "$REPO_PATH/LICENSE.txt" ]]; then
-        check_file_contains "LICENSE.txt" "SPDX-License-Identifier: MIT AND Palimpsest" "Correct SPDX identifier in LICENSE.txt"
+    # estate policy: sole-owner repos are MPL-2.0 (accept LICENSE or LICENSE.txt)
+    local _license=""
+    [[ -f "$REPO_PATH/LICENSE.txt" ]] && _license="LICENSE.txt"
+    [[ -z "$_license" && -f "$REPO_PATH/LICENSE" ]] && _license="LICENSE"
+    if [[ -n "$_license" ]]; then
+        check_file_contains "$_license" "Mozilla Public License" "LICENSE is MPL-2.0"
+        check_file_contains "$_license" "SPDX-License-Identifier: MPL-2.0" "Correct SPDX identifier in LICENSE (MPL-2.0)"
     fi
 
     # FUNDING.yml for funding transparency