chore(release): finalize v0.1.0 — LICENSE, NOTICE, WASM artefact

Adds the three release-prep artefacts so the repo is ready for
the chain store: Apache-2.0 LICENSE (boilerplate), NOTICE with
per-module copyright + third-party + methodological lineage
attribution, and the compiled wasm32-wasip2 release bundle
(module.wasm) that the Hub will install verbatim once published.

Cargo.lock is now also tracked so reproducible builds line up
with the WASM hash that ships.

Signed-off-by: flemming-it <sf@flemming.it>

NOTICE

@@ -0,0 +1,34 @@
+stats-cohort-size
+Copyright 2026 Flemming.AI
+
+This product includes software developed by Dr. Stefan Flemming
+and contributors (https://flemming.ai/).
+
+------------------------------------------------------------------
+Third-party acknowledgments
+
+JSON (de)serialization uses `serde` + `serde_json`
+(https://github.com/serde-rs), Apache-2.0 / MIT licensed.
+
+Module SDK glue is provided by `chain-module-sdk`
+(https://git.flemming.ai/fai/chain-module-sdk-rust), Apache-2.0.
+
+------------------------------------------------------------------
+Built-in cohort table — source attributions (v0.1.0)
+
+  berlin-kmu, de-kmu
+      DESTATIS Unternehmensregister 2024 (gemeinfrei, frei
+      verfügbar via genesis.destatis.de).
+
+  gastro-de
+      DEHOGA Jahresbericht 2024 (Branchenverbands-Quelle, T2).
+
+  handwerk-be
+      Handwerkskammer Berlin Statistik 2024 (T2).
+
+  bauwirtschaft-be
+      Bauindustrieverband Berlin-Brandenburg 2024 (T2).
+
+A future v0.2 will replace the static lookup with a DESTATIS
+GENESIS-API adapter (anonymes Lese-Recht; requires
+net: ["genesis.destatis.de"] permission).