feat: introduce local-first SVG workbench

LICENSES/README.md

@@ -0,0 +1,14 @@
+# Licence inventory
+
+SVG Tools is `GPL-3.0-or-later`; the full project licence is at `../LICENSE`.
+
+`THIRD_PARTY_NOTICES.md` records every direct and transitive runtime package,
+its exact installed version, licence, source and role. The release preparation
+script additionally collates the project-specific licence/notice files from the
+exact locked `node_modules` tree into
+`LICENSES/npm-runtime-licenses.txt` inside the static artifact. That generated
+file retains each package name/version and its original text.
+
+Development-only packages are recorded separately in the notices and are not
+shipped in the browser artifact. Reference repositories were inspected but no
+reference source or assets were copied or adapted.