The module's own Apache-2.0 licence covers its code and says nothing
about the material it fetches. STORE.yaml now carries a data_source
block (publisher, url, terms, required attribution, and bundled:
false), and MODULE.md/MODULE.de.md explain it in both languages,
including the sentence that the retrieved text does not replace the
official version.
Enforced platform-side by data_source_gap in chain_hub::store_index;
the four rules are written up in docs/architecture/store-format.md of
the platform repo.
Signed-off-by: flemming-it <sf@flemming.it>
Fetch one German federal law from gesetze-im-internet.de (BMJ) by its
site slug, unpack the BMJ norm XML from the site's xml.zip and return
it content-addressed (SHA-256) plus the BMJ builddate, so a flow's
audit trail pins the exact Gesetzesstand it processed.
- xml.zip unpack picks the largest XML entry (norm body)
- lying ZIP size header rejected instead of silently truncated
(audit integrity); 64 MB unpack cap, 96 MB download cap
- net permission pinned to www.gesetze-im-internet.de; no auth
- 11 unit tests (no network), wasm32-wasip2 build green
Signed-off-by: flemming-it <sf@flemming.it>
