Add the canonical license and project notice, declare the license in package metadata, and include both files in production images.
OIDC validation, principal mapping, remora:v1 roles, and current-authz filtering with kind acceptance on Keycloak and ZITADEL.
