chore: relicense to AGPL-3.0-or-later and add SPDX headers

Replaces LICENSE (GPLv3 -> AGPLv3) and prepends
`SPDX-License-Identifier: AGPL-3.0-or-later` to every source file
across decnet/, decnet_web/, tests/, scripts/, and tools/.

Rationale: closes the GPLv3 ASP loophole so any party operating a
modified DECNET as a network service must offer their modified
source. Personal copyright (Samuel Paschuan) + inbound=outbound
contributions make a future unilateral relicense infeasible.

- LICENSE: full AGPL-3.0 text (gnu.org/licenses/agpl-3.0.txt)
- COPYRIGHT: project copyright notice
- tools/add_spdx_headers.py: idempotent header injector
  (shebang- and PEP 263-aware)

Touches 1565 source files (.py, .ts, .tsx, .js, .jsx, .css, .sh).
No behavior change; comments only.

scripts/behave_shell/replay_calibration.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Replay one calibration-corpus shard through the BEHAVE-SHELL handler.
 
 Phase 6 smoke helper. Drives the production handler

scripts/behave_shell/smoke.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 ### Usage: scripts/behave_shell/smoke.sh [BEHAVE_CALIBRATION_DIR]
 #
 # BEHAVE-INTEGRATION Phase 6 — offline replay smoke test.

scripts/bus/pub.py

@@ -1,4 +1,5 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Publish a single event to the local DECNET bus.
 
 Usage: scripts/bus/pub.py <topic> [json-payload] [--type EVENT_TYPE]

scripts/bus/smoke-mutator.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 # Mutator-family topic smoke test: boots a bus worker, subscribes to
 # `topology.>`, publishes one event per mutation-lifecycle state
 # (enqueued → applying → applied) plus a topology.status transition,

scripts/bus/smoke.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 # End-to-end bus smoke test: boots a worker, subscribes, publishes,
 # verifies the event lands, tears everything down. Exits non-zero if
 # anything misbehaves.

scripts/bus/start.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 # Start a local `decnet bus` worker for manual smoke-testing.
 # Uses /tmp so it works without root and without the `decnet` POSIX group.
 # Usage: scripts/bus/start.sh [heartbeat-seconds]

scripts/bus/sub.py

@@ -1,4 +1,5 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Subscribe to a pattern on the local DECNET bus and print events.
 
 Usage: scripts/bus/sub.py 'topology.>'

scripts/decnet-init.sh

@@ -1,3 +1,4 @@
 #!/bin/bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 
 sudo .311/bin/decnet init --force --install-dir "$PWD" --user anti --group anti

scripts/mock-webhook-receiver.py

@@ -1,4 +1,5 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Mock webhook receiver for local DECNET testing.
 
 Listens on a local port, accepts POSTs from the `decnet webhook`

scripts/profile/aggregate_requests.py

@@ -1,4 +1,5 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Aggregate pyinstrument request profiles from ./profiles/*.html.
 

scripts/profile/classify_usage.py

@@ -1,4 +1,5 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Classify the shape of a memray usage_over_time.csv as plateau, climb,
 or climb-and-drop. Operates on the `memory_size_bytes` column.

scripts/profile/cprofile-cli.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 # Run a `decnet` subcommand under cProfile and write a .prof file for snakeviz.
 # Usage: scripts/profile/cprofile-cli.sh services
 #        scripts/profile/cprofile-cli.sh status

scripts/profile/memray-api.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 # Run the DECNET API under memray to capture an allocation profile.
 # Stop with Ctrl-C; then render with `memray flamegraph <bin>`.
 set -euo pipefail

scripts/profile/pyspy-attach.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 # Attach py-spy to the running DECNET uvicorn worker(s) and record a flamegraph.
 # Requires sudo on Linux because of kernel.yama.ptrace_scope=1 by default.
 set -euo pipefail

scripts/profile/view.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-or-later
 # Open the newest profile artifact in the right viewer.
 #
 # Usage:

scripts/vulture_whitelist.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Vulture whitelist — names that look unused but aren't.
 
 Run via: