re-sweep wave2: ship 4 REAL 0-CDN operator surfaces — /sovereign-search (tantivy-wasm MIT), /consensus-clusters (ngraph.leiden MIT), /mission-ledger (research-arcade MIT), /budget-router (BudgetMem+MemSkill Apache, GraphPlanner MIT)

MINED UPGRADES: governance-gateway + abacus-verify + decision-uncertainty + gor-audit (4 permissive patterns, evolved, 0-CDN, NOTICE)

chore: serve.py vendor allowlist + Dockerfile per-file COPY + NOTICE attributions

chore: serve.py vendor allowlist + Dockerfile per-file COPY + NOTICE attributions

deep-upgrade: vendor fonts (zero CDN), Prometheus proxy + YUYAY 13-axis conjunctive gate endpoint, Organism anatomy tab + Warhacker play-by-play (step timeline + boolean cascade + tamper-fail + hollow-pass guard)

NOTICE: attribute vendored MIT/Apache viz libs (3d-force-graph/globe.gl/force-graph vasturiano MIT, ECharts/echarts-gl Apache-2.0, Cytoscape MIT, d3 ISC) for frontier tabs