Pin BusyBox env notice

[jacklv-coder]

Summary

• pin busybox-1.36.1/coreutils/env.c as checksum-bound evidence
• bind Alpine's pinned CONFIG_ENV=y and BusyBox's lib-$(CONFIG_ENV) += env.o linkage to the complete inline BSD notice
• record that the pinned RootFS maps /usr/bin/env to /bin/busybox
• close only confirm-enabled-env-license-and-attribution-coverage; keep BusyBox coverage partial and all legal/redistribution gates closed
• update candidate/review counts from 22/82 to 23/83, validators, tests, checksums, and bilingual documentation

Validation

• Codex CR: no P1/P2 findings
• external license-review materialize + verify: 23 candidates
• external notice bundle materialize + verify: 83 payloads
• compliance generator write + --check: 13 reproducible files
• all RootFS Ruby test suites pass
• ./Scripts/check-docs.sh
• shasum -a 256 -c Compliance/RootFS/v0.3.3/SHA256SUMS
• ./Scripts/test.sh: 139 tests, 1 environment-only skip, 0 failures
• explicit pinned RootFS integration test passes with POCKETROOT_ROOTFS_ARCHIVE
• git diff --check

[jacklv-coder]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Already looking forward to the next diff.

Reviewed commit: 9122aa7f05

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".