feat(release): prepare first public preview

THIRD_PARTY_NOTICES.md

@@ -0,0 +1,27 @@
+# Third-party notices
+
+Magent's original source is licensed under the [MIT License](LICENSE). Third-party
+software and assets retain their own copyright and license terms.
+
+The exact JavaScript dependency graph and resolved versions are recorded in
+`frontend/package-lock.json`. Production runtime packages include Next.js,
+React, React DOM, Sharp and their transitive dependencies. Their license terms
+come from the installed package metadata and license files, not from fields in
+the lockfile. The release build collects discoverable production package
+license and notice files under `/usr/share/licenses/magent/frontend`.
+
+The exact direct Python versions are recorded in `backend/requirements.txt` and
+`docker/requirements-runtime.txt`. Python package metadata and license files are
+installed with those packages and remain subject to their respective terms.
+
+The release container also contains components from its pinned Python, Node.js
+and Alpine base images. Those components are not relicensed by Magent. The image
+includes this notice, Magent's MIT license, Node.js's license, installed Python
+package license files, discoverable production frontend license/notice files,
+and any license files supplied by the Alpine packages in the runtime image under
+`/usr/share/licenses`.
+
+Before redistributing a modified image, regenerate and review its software bill
+of materials and preserve every applicable license, copyright and notice file.
+Lockfiles are the version inventory; this summary is not a replacement for the
+complete license texts supplied by each dependency.