chore: relicense to AGPL-3.0-or-later and add SPDX headers

Replaces LICENSE (GPLv3 -> AGPLv3) and prepends
`SPDX-License-Identifier: AGPL-3.0-or-later` to every source file
across decnet/, decnet_web/, tests/, scripts/, and tools/.

Rationale: closes the GPLv3 ASP loophole so any party operating a
modified DECNET as a network service must offer their modified
source. Personal copyright (Samuel Paschuan) + inbound=outbound
contributions make a future unilateral relicense infeasible.

- LICENSE: full AGPL-3.0 text (gnu.org/licenses/agpl-3.0.txt)
- COPYRIGHT: project copyright notice
- tools/add_spdx_headers.py: idempotent header injector
  (shebang- and PEP 263-aware)

Touches 1565 source files (.py, .ts, .tsx, .js, .jsx, .css, .sh).
No behavior change; comments only.

tests/intel/__init__.py

@@ -0,0 +1 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later

tests/intel/test_abuseipdb.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Unit tests for the AbuseIPDB provider."""
 from __future__ import annotations
 

tests/intel/test_attacker_intel_repo.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Round-trip tests for the ``attacker_intel`` table and its repo helpers.
 

tests/intel/test_factory.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Tests for the intel provider factory.
 
 The factory returns a **list** of configured providers (not a singleton

tests/intel/test_feodo.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Unit tests for the abuse.ch Feodo Tracker provider.
 
 Bulk-feed semantics: one HTTP fetch loads the in-memory set, all

tests/intel/test_greynoise.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Unit tests for the GreyNoise Community provider.
 
 Mocks httpx via ``MockTransport`` and asserts:

tests/intel/test_mal_hash.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Unit tests for MalwareBazaarProvider (DEBT-046).
 
 Bulk-feed shape: one HTTP fetch loads ``_known``, subsequent

tests/intel/test_stealth_http.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Stealth-egress HTTP client must NOT advertise DECNET.
 
 Captures the request that the client emits (using httpx's MockTransport)

tests/intel/test_threatfox.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Unit tests for the abuse.ch ThreatFox provider."""
 from __future__ import annotations
 

tests/intel/test_worker.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """End-to-end tests for the intel worker shell.
 
 Covers — without any real provider impls — that the loop:

tests/intel/test_worker_publish.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Intel worker publishes ``attacker.intel.enriched`` per enriched row.
 
 Pins the producer wiring. The worker drains