chore(release): G4 — bundle LICENSE/NOTICE/README + docs in archives & packages (#77)

Completes the autonomously-doable part of G4 (release plumbing). goreleaser's
default archive globs bundle LICENSE*/README* but NOT NOTICE — an Apache-2.0
distribution must ship NOTICE. Adds an explicit archive `files:` list
(LICENSE + NOTICE + README + docs/QUICKSTART) and embeds LICENSE+NOTICE under
/usr/share/doc/devstack in the .deb/.rpm via nfpm `contents:`.

Validated locally: `goreleaser check` passes and a full `--snapshot` build
produces all 8 artifacts (4 tar.gz + 2 .deb + 2 .rpm) with NOTICE present in the
tarball. release-dryrun continues to cover this on every PR.

Remaining G4 is owner-only (outward-facing / irreversible, locked decision #4):
create the Homebrew tap repo (Q-NAME) + wire `brews:`, then cut the release —
`git tag v1.0.0 && git push origin v1.0.0` — and flip the repo public.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: gustavobertoi

.goreleaser.yaml

@@ -28,6 +28,14 @@ archives:
   - id: default
     formats: [tar.gz]
     name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
+    # Ship the license, the Apache-required NOTICE, and the quickstart in the
+    # tarball. goreleaser's defaults bundle LICENSE*/README* but NOT NOTICE.
+    files:
+      - LICENSE
+      - NOTICE
+      - README.md
+      - src: docs/QUICKSTART.md
+        dst: docs
 
 checksum:
   name_template: "checksums.txt"
@@ -45,6 +53,11 @@ nfpms:
     description: "Docker-based dev environments with infrastructure shared across projects"
     license: "Apache-2.0"
     bindir: /usr/bin
+    contents:
+      - src: LICENSE
+        dst: /usr/share/doc/devstack/LICENSE
+      - src: NOTICE
+        dst: /usr/share/doc/devstack/NOTICE
 
 snapshot:
   version_template: "{{ incpatch .Version }}-dev-{{ .ShortCommit }}"