feat: law-source-bund 0.1.0 (source.bundesrecht)

Fetch one German federal law from gesetze-im-internet.de (BMJ) by its
site slug, unpack the BMJ norm XML from the site's xml.zip and return
it content-addressed (SHA-256) plus the BMJ builddate, so a flow's
audit trail pins the exact Gesetzesstand it processed.

- xml.zip unpack picks the largest XML entry (norm body)
- lying ZIP size header rejected instead of silently truncated
  (audit integrity); 64 MB unpack cap, 96 MB download cap
- net permission pinned to www.gesetze-im-internet.de; no auth
- 11 unit tests (no network), wasm32-wasip2 build green

Signed-off-by: flemming-it <sf@flemming.it>

STORE.yaml

@@ -0,0 +1,28 @@
+schema_version: 1
+
+author:
+  name: "Flemming.AI"
+  email: chain@flemming.ai
+  url: https://flemming.ai
+
+license: Apache-2.0
+
+tagline:
+  en: "Fetch German federal law from gesetze-im-internet.de"
+  de: "Deutsches Bundesrecht von gesetze-im-internet.de holen"
+
+description:
+  en: "Resolves a gesetze-im-internet.de slug against the public BMJ site, unpacks the law's BMJ norm XML and returns it content-addressed (SHA-256) so the audit trail pins the exact legal state processed."
+  de: "Löst ein gesetze-im-internet.de-Kürzel gegen die öffentliche BMJ-Seite auf, entpackt das BMJ-Normen-XML des Gesetzes und liefert es inhaltsadressiert (SHA-256) — das Prüfprotokoll hält den exakten Gesetzesstand fest."
+
+category: data
+tags: [legal, bundesrecht, gesetze-im-internet, bmj, source]
+
+assets:
+  icon: assets/icon.svg
+
+documentation:
+  long_description: MODULE.md
+
+links:
+  repository: https://git.flemming.ai/chain-modules/law-source-bund