feat: launch local-first Sudoku workbench

public/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,19 @@
+# Third-party notices
+
+Release preparation collates licence files for the exact locked runtime
+packages into `LICENSES/npm-runtime-licenses.txt` inside the static artifact.
+
+| Package                          | Version | Licence    | Role                            | Source                                      |
+| -------------------------------- | ------- | ---------- | ------------------------------- | ------------------------------------------- |
+| `@add-ideas/toolbox-contract`    | 0.2.3   | Apache-2.0 | manifest and context contract   | https://git.add-ideas.de/lotobo/toolbox-sdk |
+| `@add-ideas/toolbox-shell-react` | 0.2.3   | Apache-2.0 | shared shell, theme and actions | https://git.add-ideas.de/lotobo/toolbox-sdk |
+| `lz-string`                      | 1.5.0   | MIT        | compact local share payloads    | https://github.com/pieroxy/lz-string        |
+| `react`                          | 19.2.8  | MIT        | application UI                  | https://github.com/facebook/react           |
+| `react-dom`                      | 19.2.8  | MIT        | browser rendering               | https://github.com/facebook/react           |
+
+`scheduler`, distributed by the React project under MIT, is the only transitive
+runtime package. Development-only packages build and test the source but are
+not shipped as runtime modules.
+
+SudokuPad, SudokuWiki and HoDoKu are research references only. Their source,
+documentation, wording, visual assets and puzzle data are not bundled or copied.