license switch agpl -> busl1, sprints work, new product advisories

NOTICE.md

@@ -1,10 +1,11 @@
 # NOTICE
 
 **StellaOps**
-Copyright (C) 2025 stella-ops.org
+Copyright (C) 2026 stella-ops.org
 
-This product is licensed under the GNU Affero General Public License v3.0 or later (AGPL-3.0-or-later).
-See the LICENSE file for the full license text.
+This product is licensed under the Business Source License 1.1 (BUSL-1.1) with
+the Additional Use Grant described in LICENSE. See LICENSE for the full text
+and Change License details.
 
 Source code: https://git.stella-ops.org
 
@@ -141,6 +142,9 @@ This software includes or depends on the following third-party components:
 ### Infrastructure Components (Not Bundled)
 
 The following components are used in deployment but not distributed with StellaOps:
+If you mirror or redistribute these components (e.g., via `repository.stella-ops.org`),
+you are responsible for complying with their upstream licenses and providing any
+required notices or source offers.
 
 #### PostgreSQL
 - **License:** PostgreSQL License (permissive)
@@ -153,6 +157,19 @@ The following components are used in deployment but not distributed with StellaO
 #### Valkey
 - **License:** BSD-3-Clause
 - **Source:** https://valkey.io/
+- **Usage:** Cache (Redis-compatible) for StellaOps and optional Rekor stack
+
+#### Docker Engine
+- **License:** Apache-2.0
+- **Source:** https://github.com/moby/moby
+
+#### Kubernetes
+- **License:** Apache-2.0
+- **Source:** https://github.com/kubernetes/kubernetes
+
+#### Rekor (Sigstore transparency log)
+- **License:** Apache-2.0
+- **Source:** https://github.com/sigstore/rekor-tiles
 
 ---
 
@@ -187,5 +204,5 @@ Full license texts for vendored components are available in:
 
 ---
 
-*This NOTICE file is provided in compliance with Apache-2.0 and other open source license requirements.*
-*Last updated: 2025-12-26*
+*This NOTICE file is provided to satisfy third-party attribution requirements (including Apache-2.0 NOTICE obligations).*
+*Last updated: 2026-01-20*