chore: relicense to AGPL-3.0-or-later and add SPDX headers

Replaces LICENSE (GPLv3 -> AGPLv3) and prepends
`SPDX-License-Identifier: AGPL-3.0-or-later` to every source file
across decnet/, decnet_web/, tests/, scripts/, and tools/.

Rationale: closes the GPLv3 ASP loophole so any party operating a
modified DECNET as a network service must offer their modified
source. Personal copyright (Samuel Paschuan) + inbound=outbound
contributions make a future unilateral relicense infeasible.

- LICENSE: full AGPL-3.0 text (gnu.org/licenses/agpl-3.0.txt)
- COPYRIGHT: project copyright notice
- tools/add_spdx_headers.py: idempotent header injector
  (shebang- and PEP 263-aware)

Touches 1565 source files (.py, .ts, .tsx, .js, .jsx, .css, .sh).
No behavior change; comments only.

tests/services/__init__.py

@@ -0,0 +1 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later

tests/services/test_caddyfile_render.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Caddyfile protocol token generation for http and https entrypoints."""
 import json
 

tests/services/test_config_schema.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Schema-driven service config: descriptors, validation, compose round-trip."""
 
 import base64

tests/services/test_cred_emitters.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Per-service credential-emitter integration tests.
 
 Each test simulates the SD-block a migrated emitter produces, hands it

tests/services/test_custom_service.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Tests for decnet.custom_service — BYOS (bring-your-own-service) support.
 """

tests/services/test_http_https_versions.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """http_versions multi_enum field: coercion, compose env."""
 import json
 

tests/services/test_https_compose_h3_app.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Verify that the HTTPS Caddyfile template (generated by entrypoint.sh):
   - Includes `decnet_h3` in the global block when http/3 is selected.

tests/services/test_mongodb_scram.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """MongoDB SCRAM credential capture tests.
 
 Exercises the inline BSON walker + SCRAM extractor by handcrafting

tests/services/test_ntlmssp_parser.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """NTLMSSP Type 3 parser tests.
 
 Builds Type 3 buffers field-by-field per MS-NLMP §2.2.1.3 and asserts

tests/services/test_service_isolation.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Service isolation tests.
 

tests/services/test_services.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Tests for all 25 DECNET service plugins.
 

tests/services/test_smtp_relay.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Tests for SMTP Relay service.
 """

tests/services/test_smtp_targets.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Tests for SMTP victim-domain tracking (SmtpTarget table + profiler ingestion).
 

tests/services/test_ssh.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Tests for the SSHService plugin (real OpenSSH, Cowrie removed).
 """

tests/services/test_ssh_capture_emit.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Round-trip tests for decnet/templates/ssh/emit_capture.py.
 

tests/services/test_ssh_stealth.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """
 Stealth-hardening assertions for the SSH honeypot template.
 

tests/services/test_syslog_bridge_helpers.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
 """Tests for shared emitter helpers in templates/syslog_bridge.py.
 
 The canonical file is what gets propagated into per-template build