Version and enforce public trademark and DRM material reviews

[KeyffMS]

Scope

Close Issue #92 by treating exact maintained public materials as reviewed evidence and blocking unreviewed names, compatibility claims, assets and future publication surfaces.

What changed

• add release/public-materials.json as the versioned registry of maintained and planned surfaces;
• pin README, package notice, legal policy, trademark-risk record, release template, About-window review and project-owned brand assets by Git blob SHA;
• distinguish six maintained surfaces from nine planned website/release/store/directory/social/announcement surfaces;
• add tools/verify-public-materials.ps1 to validate exact evidence, factual compatibility wording, asset records, review ownership and activation state;
• add negative tests for stale evidence, implied official integration, a third-party logo without a use basis and activation of an unreviewed GitHub Release surface;
• run both public-material checks in the main Windows CI workflow;
• add a publication, screenshot, compatibility-claim and rights-holder-objection process;
• require public-material disclosure in the pull-request template;
• add a ready-to-use evidence template for the remaining manual main ruleset action in [P1] [Contributions/IP] Apply the protected-main ruleset for enforced DCO #87.

Maintained-surface decision

The current maintained scope is limited to repository text/policies, the portable ZIP legal notice, the reviewed application About surface, the release-description template and project-owned SightAdapt brand assets.

The canonical website implementation, GitHub Releases, GitHub Pages, WinGet, Open Hub, SourceForge, social profiles, Product Hunt and community announcements remain planned. Their tracking Issues must add exact final text/assets, URLs and review evidence before those surfaces can be activated.

The current live aiteracja.pl/sightadapt/ bytes could not be read from the available environment and search indexes returned no result. This PR therefore does not make an unsupported claim about its current content; the complete maintained website review remains assigned to #100/#103/#124.

Verified result

Final head 7c4bf73348d0101fc6e6a2b5c1ca4ebfc6882d9f passed:

• DCO run 30648478483;
• Windows build/release run 30648478474;
• six maintained surfaces with exact Git blob evidence;
• nine future surfaces retained as planned;
• stale reviewed evidence rejected;
• official integration wording rejected;
• a third-party logo without ownership/use-basis/purpose/review and immutable evidence rejected;
• unreviewed activation of github-release rejected;
• 210 application tests;
• 452 published component mappings;
• complete SBOM/license review and all existing package-negative tests;
• final portable ZIP SHA-256 25AD398276ADBB69B4523C44A2A1DC889D7346D4903EAC3441F1B5C8BC1AA85F;
• GitHub Actions artifact digest sha256:a50bac2c369f38cdc484188f902481610d45e425b9d63ad2d5d59926bc5f35b4.

#87 support

All automatable DCO controls remain merged from PR #145. This PR adds docs/legal/REPOSITORY-PROTECTION-EVIDENCE-TEMPLATE.md so the active main ruleset and blocked unsigned-commit test can be recorded consistently after the manual GitHub settings steps.

Provenance and licensing

• Every human-authored commit has a valid Signed-off-by trailer under DCO.md.
• The contribution is authorized for distribution under the repository MIT License.
• No third-party logos, screenshots or promotional assets are added.
• Material AI assistance is disclosed and validated through dedicated fixtures and CI.
• No unknown, incompatible or non-redistributable material is added.

Boundaries

This PR records only verifiable maintained surfaces. It does not activate or approve the website, GitHub Release, store, directory, mirror, social or announcement channels.

Closes #92.
Addresses #87.