GitLab

Prepare the source tree for public release under the Apache License,
Version 2.0. Adds the standard top-level files an open-source project is
expected to ship:

  - LICENSE.md     full Apache 2.0 text, copyright Tim Rice
  - NOTICE         attribution for bundled GPL CLI scanners (wapiti,
                   nikto, testssl.sh, sqlmap), MariaDB, and LGPL/MPL
                   transitive deps; points to sbom.spdx.json / sbom.cdx.json
                   for the full inventory
  - SECURITY.md    private disclosure address, 2/5-day SLA, 30-day default
                   embargo, scope (issues in nextgen-dast itself; bundled
                   scanner vulns go upstream), safe-harbor clause
  - CONTRIBUTING.md  PR workflow, DCO sign-off, US-English style, no
                     version-bumps without maintainer approval, no AI/
                     machine-generated attribution, schema-migration
                     du...