docs: publish Preview 19 dogfood evidence

Export the reviewed allowlisted snapshot from private source commit 05928cebd01b586cf9e9d4b8c8537a7605a6068c. This records the exact candidate, bounded capacity result, stateful migration scratch requirement, authenticated batch identity proof, and immediate live acceptance evidence.

AI-Assisted: OpenAI Codex
Signed-off-by: Cole Speelman <crspeelman@gmail.com>

LICENSES.md

@@ -0,0 +1,20 @@
+<!-- SPDX-License-Identifier: AGPL-3.0-only -->
+
+# Licence map
+
+| Path | Licence |
+| --- | --- |
+| Go application and internal packages | AGPL-3.0-only |
+| `scripts/`, `.gitea/`, documentation, and release machinery | AGPL-3.0-only |
+| `examples/` | 0BSD |
+| Browser campaign source and tooling | AGPL-3.0-only |
+
+The browser campaign pins Apache-2.0-licensed Playwright as a development-only
+dependency. Its optional macOS watcher is MIT-licensed. Neither is linked into
+or packaged with the Observatory binary.
+
+Every text source file carries an SPDX identifier or, where strict JSON cannot
+accept comments, a matching `.license` sidecar or machine-readable licence
+field. Generated Sandwich Hime outputs inherit the licence of their adjacent
+`.sando` source and retain exact generator provenance. The complete AGPL and
+0BSD licence texts are included in `LICENSE` and `examples/LICENSE`.