feat(stapeln): add selur-compose.toml + fix SPDX header in svc/README.adoc

Adds Podman-compose TOML stack definition for wokelang build service
with no-new-privileges security hardening. Also fixes missing SPDX
header in .machine_readable/svc/README.adoc caught by pre-commit hook.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/svc/README.adoc

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: PMPL-1.0-or-later
 = `.machine_readable/svc/` — Service components for wokelang
 :toc:
 

selur-compose.toml

@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+#
+# Stapeln service definition for wokelang
+#
+# Usage:
+#   podman-compose -f selur-compose.toml up -d
+#   just stack-up
+
+[project]
+name = "wokelang"
+
+[services.wokelang]
+build = { context = ".", dockerfile = "Containerfile" }
+image = "wokelang:latest"
+restart = "unless-stopped"
+networks = ["default"]
+security_opt = ["no-new-privileges:true"]
+healthcheck = { test = ["CMD", "wokelang", "--version"], interval = "30s", timeout = "5s", retries = 3 }