docs: convert license to Apache 2.0 and update all related documentation (#1139)

[vybe]

Summary

• Replaces the Polyform Noncommercial License 1.0.0 with the verbatim Apache License 2.0 (downloaded from apache.org; only the appendix copyright boilerplate filled in: Copyright 2025-2026 Ability AI), making Trinity OSI-approved open source
• Adds a NOTICE file per Apache 2.0 convention
• Updates every license reference found by audit, including two not listed in the issue: AGENTS.md (key-facts table) and src/cli/ (pyproject + README declared MIT — same inconsistency class as the MCP server's package.json)

Changes

File	Change
LICENSE	Verbatim Apache 2.0 text with Ability AI copyright line
NOTICE	New — Apache 2.0 attribution convention
README.md	Badge → Apache 2.0; tagline reframed "Source-available · Polyform NC" → "Open source · Apache 2.0"; License section rewritten — commercial-licensing paragraph reframed around enterprise modules (#847 seam)
CONTRIBUTING.md	Inbound contributions now under Apache 2.0 §5 (inbound = outbound)
AGENTS.md	License row in key-facts table updated
docs/onboarding/00-welcome.md	License mention updated; "Commercial Use" section reframed as "Enterprise"
src/mcp-server/package.json	MIT → Apache-2.0
src/cli/pyproject.toml, src/cli/README.md	MIT → Apache-2.0 (PyPI trinity-cli metadata)

Not changed (intentional): docs/planning/ strategy docs discuss enterprise license mechanisms (Ed25519 tokens), not the repo license — no Polyform references there. src/backend/enterprise/ (private submodule) stays proprietary per the issue.

Verification

• grep -ri "polyform\|noncommercial" --include="*.md" → no matches (repo-wide, all file types also clean)
• package.json / pyproject.toml re-parsed as valid JSON/TOML after edit
• LICENSE is byte-identical to the canonical apache.org text except the filled-in appendix copyright line, so GitHub's licensee will detect Apache-2.0 after merge (verify on the repo page post-merge)
• No CI workflow or test asserts on license strings (checked)

⚠️ Pre-merge legal check (from issue Technical Notes)

Relicensing requires authority over all contributions. git shortlog -sne shows external-looking contributors beyond the Ability AI team (Alex Korin, dolho, Andrii Pasternak, Pavlo Shulin, obasilakis, webmixgamer, Oleksii Dolhov, plus dependabot). Please confirm all are covered (employees / contractors / CLA / DCO) before merging.

Test Plan

• Stale-reference grep clean
• JSON/TOML validity verified
• GitHub repo license detection shows Apache 2.0 (post-merge check)

Fixes #1139

🤖 Generated with Claude Code