YuanSpace C2PA Inspector third-party notices

The browser reading lifecycle and manifest normalization are adapted from:
Adrian Ceja / C2PA Web Inspector (MIT)
https://github.com/AdrianCeja/c2pa-web
Commit: 113a55a68cf3217f742d614be863aa827ce9c0ff
Copyright (c) 2026 Adrian Ceja
Full license: AdrianCeja-c2pa-web-MIT.txt

@contentauth/c2pa-web 0.12.3 and @contentauth/c2pa-wasm 0.9.2 (MIT)
https://github.com/contentauth/c2pa-js
Copyright 2025 Adobe. All rights reserved.
Full licenses: contentauth-c2pa-web-MIT.txt, contentauth-c2pa-wasm-MIT.txt

Runtime dependencies (the npm packages declare ISC but omit a separate license file):
highgain 0.1.0 -- author: Eli Mensch -- ISC
https://www.npmjs.com/package/highgain
ts-deepmerge 8.0.0 -- author: Raice Hannay -- ISC
https://github.com/voodoocreation/ts-deepmerge

ISC License

Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.

THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

Build change: the SDK's ts-deepmerge ^7.0.3 dependency is bundled with 8.0.0,
which retains the merge API and rejects prototype method override keys.
SDK entry point, embedded worker and WASM are otherwise unmodified.
No external runtime CDN or trust-list server is contacted.