fix(cicd): foundational reds on main — license (#82) + Elixir API drift (#83) (#88)

## Summary

Two pre-existing CI/CD reds on `main` that block every downstream PR.
Both have minimal blast radius (1-line workspace metadata + 1 added
Elixir dep + 1 new HTTP wrapper + 1 renamed call site).

### Closes #82 — workspace license inconsistency

- Workspace \`Cargo.toml:32\` was \`AGPL-3.0-or-later\` while every SPDX
header, README.adoc, SECURITY.md and CHANGELOG.adoc declares MPL-2.0.
- \`deny.toml [licenses].allow\` does not include AGPL → \`cargo deny
check\` rejects every synthesized crate manifest.
- Flipped workspace license to MPL-2.0 to match the docs and SPDX
headers. Not a deliberate intentional mismatch like echidna (no
CLAUDE.md marker).

### Closes #83 — Elixir build validation under \`--warnings-as-errors\`

| Warning | Fix |
|---|---|
| \`CAStore.file_path/0 undefined\` at \`Redix.Connector:261\` | Added
\`{:castore, \"~> 1.0\"}\` to \`mix.exs\` deps (already a pinned
transitive in \`mix.lock\` via redix/mint/excoveralls; just needed to be
declared directly so the optional-dep is present at compile time) |
| \`VeriSim.RustClient.list_octads/2 undefined\` (caller at
\`transport.ex:166\`) | Added the missing HTTP wrapper in
\`rust_client.ex\`. The underlying Rust route \`GET
/octads?limit=&offset=\` already exists at
\`verisim-api/src/lib.rs:714\` and dispatches to \`list_octads_handler\`
— pure caller-side drift |
| \`VeriSim.RustClient.trigger_normalization/1 undefined\` (caller at
\`transport.ex:194\`) | Caller used the old API name; implementation is
\`RustClient.normalize/1\`. Renamed the call site |

## Test plan

- [ ] \`cargo deny check\` passes on the workspace
- [ ] \`cd elixir-orchestration && mix deps.get && mix compile
--warnings-as-errors\` succeeds
- [ ] Existing CI checks (Build Validation, Governance,
openssf-compliance) flip green

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

Cargo.toml

@@ -29,7 +29,7 @@ members = [
 version = "0.1.0"
 edition = "2021"
 authors = ["Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>"]
-license = "AGPL-3.0-or-later"
+license = "MPL-2.0"
 repository = "https://gitlab.com/hyperpolymath/verisimdb"
 homepage = "https://github.com/hyperpolymath/verisimdb"
 documentation = "https://github.com/hyperpolymath/verisimdb/tree/main/docs"

elixir-orchestration/lib/verisim/rust_client.ex

@@ -1,4 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
+# Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 defmodule VeriSim.RustClient do
   @moduledoc """
@@ -198,6 +199,17 @@ defmodule VeriSim.RustClient do
     end
   end
 
+  @doc """
+  Paginated listing of octad entities.
+  """
+  def list_octads(limit \\ 50, offset \\ 0) do
+    case get("/octads", limit: limit, offset: offset) do
+      {:ok, %{status: 200, body: body}} -> {:ok, body}
+      {:ok, %{status: status, body: body}} -> {:error, {status, body}}
+      {:error, reason} -> {:error, reason}
+    end
+  end
+
   # Search Operations
 
   @doc """

elixir-orchestration/lib/verisim/transport.ex

@@ -1,4 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
+# Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 defmodule VeriSim.Transport do
   @moduledoc """
@@ -191,7 +192,7 @@ defmodule VeriSim.Transport do
         {:error, reason} -> {:error, reason}
       end
     else
-      RustClient.trigger_normalization(entity_id)
+      RustClient.normalize(entity_id)
     end
   end
 end

elixir-orchestration/mix.exs

@@ -1,4 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
+# Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 defmodule VeriSim.MixProject do
   use Mix.Project
@@ -63,6 +64,12 @@ defmodule VeriSim.MixProject do
       # JSON encoding/decoding
       {:jason, "~> 1.4"},
 
+      # Bundled CA certificates — pulled in to satisfy `Redix.Connector`
+      # (and `mint`/`excoveralls`) which treat castore as an optional dep.
+      # `mix compile --warnings-as-errors` flagged the unresolved
+      # `CAStore.file_path/0` call site at `lib/redix/connector.ex:261`.
+      {:castore, "~> 1.0"},
+
       # Telemetry and metrics
       {:telemetry, "~> 1.2"},
       {:telemetry_metrics, "~> 1.0"},