Open-source notices

Direct runtime dependencies bundled into this deployment, with the license recorded for each package.