[jacksteamdev]

Summary

bun run package (browser only)
  -> Wasm + Vite production build
  -> cargo-about + Vite license output
  -> ignored target/distribution/browser/

Use standard tooling to generate attribution only when packaging the browser for distribution. Keep ordinary builds and tests independent of attribution tools. Commit only the thin packaging script, configuration and template; retain no copied dependency licenses or generated reports.

Evidence

• Before: Browser builds had no distribution attribution command.
  After: Browser packaging completed successfully with cargo-about 0.9.2, exact-version crate source links, Vite output and the installed Rust standard-library notice.
• Tooling tests: 10 passed; tooling TypeScript check and all seven PR CI checks passed.

Merge Danger

Door: Two-way

Blast Radius: Packaging

Optional browser packaging requires cargo-about 0.9.2, pinned-toolchain rust-docs and upstream license retrieval access. Ship the complete output directory. Worker and native distribution packaging remain outside this change.