fix: resolve social catalog rights gate

[szmyty]

Completes the rights-review gate left deliberately open by #55 and finishes the remaining work for #52.

Decision

The current Media Cheat Sheet terms were reviewed on 2026-08-29 (source page last updated 2026-08-21):

• specifications and guidance may be used for personal or commercial creative work;
• the terms do not expressly authorize republication of the full specification directory as a normalized public catalog;
• website content remains protected and only limited quotation/linking is identified;
• templates may be used or modified for creative projects, but may not be republished or redistributed as a competing library or standalone product.

Aether therefore records a conservative repository-publication decision: creative reference is permitted, while bulk normalized catalog republication and raw/template redistribution are not authorized from this snapshot. This is a source-governance decision, not legal advice.

Changes

• add the durable rights-review record and three-part use boundary;
• mark the source candidate reviewed, restricted, redistribution-disallowed, and verified;
• advance the metadata-only catalog to 1.0.1;
• preserve zero source-derived records and no raw archive/SVG templates;
• refresh the portable skill, generated catalogs, manifests, and first-party catalog;
• pin catalog digest cc8186add31b923ceabdd0516c8f959823b36a0397262c2a03a1eef6d380e17e;
• update deterministic tests for the resolved rights state.

Validation

• git diff --check
• ./aether catalog generate --check
• python3 catalog/validate_catalog.py
• python3 catalog/provenance_model.py check --scope "all"
• python3 library/organization/skills/build-distributions.py --output-directory "dist" --check
• python3 catalog/social-surfaces/build-distribution.py --output-directory "dist" --check
• python3 catalog/social-surfaces/validate.py
• python3 -m unittest --verbose tests/test_social_surface_catalog.py — 5 passed
• ./aether distribution build --output-directory "dist"
• ./aether distribution build --output-directory "dist" --check
• ./aether validate --format "text" — 0 diagnostics
• ./aether validate --shell --format "text" — 0 diagnostics
• ./aether validate --staging --strict-staging --format "text" — 0 diagnostics
• ./aether eval run --mode "deterministic" --format "text" — 151/151 passed

Closes #54
Closes #52