chore: relicense to AGPL-3.0-or-later and add SPDX headers

Replaces LICENSE (GPLv3 -> AGPLv3) and prepends
`SPDX-License-Identifier: AGPL-3.0-or-later` to every source file
across decnet/, decnet_web/, tests/, scripts/, and tools/.

Rationale: closes the GPLv3 ASP loophole so any party operating a
modified DECNET as a network service must offer their modified
source. Personal copyright (Samuel Paschuan) + inbound=outbound
contributions make a future unilateral relicense infeasible.

- LICENSE: full AGPL-3.0 text (gnu.org/licenses/agpl-3.0.txt)
- COPYRIGHT: project copyright notice
- tools/add_spdx_headers.py: idempotent header injector
  (shebang- and PEP 263-aware)

Touches 1565 source files (.py, .ts, .tsx, .js, .jsx, .css, .sh).
No behavior change; comments only.

decnet/web/router/attackers/__init__.py

@@ -0,0 +1 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later

decnet/web/router/attackers/_guards.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Shared helpers for the per-attacker routes.
 
 Currently houses the 404 guard used by the SSE events stream

decnet/web/router/attackers/api_events.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """SSE stream of per-attacker behavioural events — one connection per
 AttackerDetail page.
 

decnet/web/router/attackers/api_export_attacker_misp.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """GET /api/v1/attackers/{uuid}/export/misp — MISP event for one attacker.
 
 Converts the attacker's STIX 2.1 bundle to a MISP event JSON file via

decnet/web/router/attackers/api_export_attacker_stix.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """GET /api/v1/attackers/{uuid}/export/stix — STIX 2.1 bundle for one attacker.
 
 Returns a self-contained STIX 2.1 Bundle with the attacker's IP

decnet/web/router/attackers/api_export_attackers.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """GET /api/v1/attackers/export — bulk JSON export of all attacker + intel data."""
 import json
 from datetime import datetime, timezone

decnet/web/router/attackers/api_export_attackers_misp.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """GET /api/v1/attackers/export/misp — fleet-wide MISP collection.
 
 Returns a MISP collection JSON ({"response": [event, ...]}) with one event

decnet/web/router/attackers/api_export_attackers_stix.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """GET /api/v1/attackers/export/stix — fleet-wide STIX 2.1 bundle.
 
 Returns a self-contained STIX 2.1 Bundle covering every attacker the

decnet/web/router/attackers/api_get_attacker_artifacts.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 from typing import Any
 
 from fastapi import APIRouter, Depends, HTTPException

decnet/web/router/attackers/api_get_attacker_attribution.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """GET /api/v1/attackers/{uuid}/attribution — per-primitive
 attribution state for one attacker.
 

decnet/web/router/attackers/api_get_attacker_commands.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 from typing import Any, Optional
 
 from fastapi import APIRouter, Depends, HTTPException, Query

decnet/web/router/attackers/api_get_attacker_detail.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 from typing import Any
 
 from fastapi import APIRouter, Depends, HTTPException

decnet/web/router/attackers/api_get_attacker_intel.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """GET /api/v1/attackers/{uuid}/intel — latest threat-intel row for an attacker."""
 from typing import Any
 

decnet/web/router/attackers/api_get_attacker_mail.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 from typing import Any
 
 from fastapi import APIRouter, Depends, HTTPException

decnet/web/router/attackers/api_get_attacker_smtp_targets.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 from typing import Any
 
 from fastapi import APIRouter, Depends, HTTPException

decnet/web/router/attackers/api_get_attacker_transcripts.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 from typing import Any
 
 from fastapi import APIRouter, Depends, HTTPException

decnet/web/router/attackers/api_get_attackers.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 import asyncio
 import time
 from typing import Any, Optional