Pin BusyBox bzip2 configuration evidence

[jacklv-coder]

Summary

• include the exact pinned Alpine busyboxconfig in the external license/NOTICE evidence tree
• bind enabled CONFIG_BZIP2=y, CONFIG_BZIP2_SMALL=8, and CONFIG_FEATURE_BZIP2_DECOMPRESS=y to BusyBox 1.36.1's exact bundled bzip2 license and attribution notice
• split and close only the bzip2-specific engineering review item; keep all other BusyBox inline third-party notices open
• update generated compliance artifacts, bilingual documentation, validators, and regression tests for 13 remote payloads / 47 aports files / 81 reviewed payload files

Scope and gates

• BusyBox license-text and attribution coverage remain partial
• other bundled third-party notice review remains open
• legal review, corresponding-source delivery review, and redistribution approval remain open
• the RootFS payload is not added to the app bundle

Validation

• codex review --base origin/main: no actionable issues
• all Ruby script test suites passed
• ./Scripts/test.sh: 139 tests, 1 environment-gated skip, 0 failures
• bash Scripts/check-docs.sh passed
• external 81-file evidence tree materialization and review verification passed
• compliance generator --check reproduced all 13 generated files
• git diff --check passed

[jacklv-coder]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: e0fb64b3e0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".