Close OpenSSL notice engineering review

[jacklv-coder]

Summary

• pin OpenSSL 3.1.4 README, CA.pl, and tsget source templates as checksum-bound attribution evidence
• cover the OpenSSL Project, OpenTSA Project, and SSLeay attributions present in installed content
• bind engineering review to the exact 77-file candidate tree while keeping legal and redistribution gates closed
• regenerate compliance evidence and update Chinese/English documentation

Validation

• ruby Scripts/rootfs-license-notice-candidates.rb
• ruby Scripts/rootfs-license-notice-review-results.rb --bundle /private/tmp/pocketroot-license-notice-v2-openSSL.UrlS0D/license-notice
• all Tests/Scripts/RootFS*Tests.rb (78 runs, 308 assertions)
• ruby Scripts/generate-rootfs-compliance.rb --archive /private/tmp/pocketroot-license-audit.wLbK0L/fs.tar.gz --check
• ./Scripts/check-docs.sh
• ./Scripts/test.sh (139 tests, 1 expected skip, 0 failures)
• Codex CR before commit and again on exact commit 36e0eb6 (no findings)

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 36e0eb6ba5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".