chore: relicense under Apache-2.0 and add a NOTICE file

[taovietducofficial]

MIT already required downstream to keep the copyright notice. Apache-2.0 adds what MIT does not:

Section 4(b) -- derivative works must state which files were changed
Section 4(d) -- distributed derivatives must carry the NOTICE file contents
Section 6 -- no permission to use the author name to promote a fork
Section 3 -- an explicit patent grant, with a retaliation clause

Also stamps org.opencontainers.image.authors and .vendor into the image config. Those labels ride inside the cosign-signed, SLSA-attested artifact, where a fork cannot strip them from something already published.

This does not revoke MIT for copies already distributed under it; the change applies from this commit forward. Sole copyright holder, so no consent needed.

What & why

Changes

Checklist

• npm run lint && npm run typecheck && npm test pass ở local
• Đã cập nhật/thêm test cho thay đổi
• Đã cập nhật docs nếu cần

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	100% (🎯 80%)	4 / 4
🔵	Statements	100% (🎯 80%)	6 / 6
🔵	Functions	100% (🎯 80%)	3 / 3
🔵	Branches	100% (🎯 80%)	1 / 1

File Coverage

No changed files found.

Generated in workflow #52 for commit 17ae6ed by the Vitest Coverage Report Action