Add repository license compatibility guard

[ethanmillerinvestments-code]

Summary

• Adds a dependency-free repository dependency license compatibility guard for Project Repository & Version Control.
• Evaluates code package licenses, dataset licenses, model weight terms, generated figure reuse, fork attribution, SPDX normalization, notice coverage, and release/export blocking conflicts.
• Emits release decisions for publishable assets, notice-required assets, conflicts, and holds before DOI publication or partner export.
• Includes JSON, Markdown, SVG, and MP4 reviewer artifacts.

Non-overlap

This targets repository release/export license compatibility. It does not implement a broad repository ledger, release engine, structured diff/rollback, provenance attestation, release embargo, notebook replay, schema migration, citation impact, API/export verifier, merge queue, environment drift, access review, DOI tombstone, metadata readiness, branch hypothesis lineage, or sensitive-artifact commit guard.

Validation

• npm run check
• npm test
• npm run demo
• ffprobe -v error -show_entries format=duration,size -show_entries stream=codec_name,width,height,pix_fmt -of default=noprint_wrappers=1 reports/demo.mp4
• git diff --check
• git diff --cached --check

/claim #10