feat: PyroWave Phase 3 — pinned rate, all-intra silencing, opt-in UI, notices, docs

plan §4.6 + Phase 3 productization:

- Pinned bitrate: an Automatic client (bitrate 0) on a PyroWave session
  resolves to the codec's ~1.6 bpp operating point for the mode (≈200
  Mbps at 1080p60) instead of the 20 Mbps H.26x default; explicit rates
  are honored. Mid-stream SetBitrate retargets are refused with the
  pinned rate acked (guards old/foreign clients), and the client-side
  AIMD controller + startup capacity probe stay off for the codec — no
  rate descent into wavelet mush, no climb probe whose VBV reasoning
  doesn't apply to hard per-frame CBR. Unit-tested.

- All-intra silencing: the data plane drops drained keyframe/RFI
  requests on PyroWave sessions (the next frame IS the recovery), so
  the forced-IDR cooldown, RFI attempt, and storm coalescing never run.

- Opt-in UI: 'PyroWave (wired LAN)' joins the console's Video-codec
  cycler; trust::Settings maps it to CODEC_PYROWAVE. Safe everywhere by
  the negotiation contract — an un-advertised preference falls back
  through the ladder.

- FEC: decision recorded — adaptive FEC (10% start, loss-report driven)
  stays as-is for the MVP opaque-AU mode; the FEC≈0 policy belongs to
  the Phase-4 datagram-aligned mode.

- THIRD-PARTY-NOTICES: the generator now lists third-party trees
  vendored inside first-party crates (pyrowave, Granite subset, volk,
  Vulkan-Headers) with their full license texts; file regenerated.

- docs-site: 'PyroWave (wired-LAN codec)' page — what it is, the
  bandwidth table, how to enable it, current limits.

Validated on .21: 309 host + 148 core + 26 client tests green,
console-ui clean, both feature configs.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

scripts/gen-third-party-notices.py

@@ -45,6 +45,25 @@ def find_license_files(pkg_dir):
     return out
 
 
+# Third-party source trees VENDORED inside first-party workspace crates — the
+# workspace-member skip in main() hides them from `cargo metadata`, so they are listed
+# here explicitly: (label, license file relative to the repo root, source URL).
+VENDORED_TREES = [
+    ("pyrowave (vendored, crates/pyrowave-sys)",
+     "crates/pyrowave-sys/vendor/pyrowave/LICENSE",
+     "https://github.com/Themaister/pyrowave"),
+    ("Granite subset (vendored, crates/pyrowave-sys)",
+     "crates/pyrowave-sys/vendor/pyrowave/Granite/LICENSE",
+     "https://github.com/Themaister/Granite"),
+    ("volk (vendored, crates/pyrowave-sys)",
+     "crates/pyrowave-sys/vendor/pyrowave/Granite/third_party/volk/LICENSE.md",
+     "https://github.com/zeux/volk"),
+    ("Vulkan-Headers (vendored, crates/pyrowave-sys)",
+     "crates/pyrowave-sys/vendor/pyrowave/Granite/third_party/khronos/vulkan-headers/LICENSE.md",
+     "https://github.com/KhronosGroup/Vulkan-Headers"),
+]
+
+
 def main():
     ap = argparse.ArgumentParser()
     ap.add_argument("--out", default="THIRD-PARTY-NOTICES.txt")
@@ -78,6 +97,23 @@ def main():
             ent = texts.setdefault(h, {"text": txt, "filename": fname, "crates": set()})
             ent["crates"].add(label)
 
+    repo_root = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+    vendored = []
+    for label, lic_path, url in VENDORED_TREES:
+        full = os.path.join(repo_root, lic_path)
+        try:
+            with open(full, encoding="utf-8", errors="replace") as f:
+                txt = f.read().strip()
+        except OSError:
+            print(f"WARNING: vendored license missing: {lic_path}", file=sys.stderr)
+            continue
+        vendored.append((label, url))
+        h = hashlib.sha256(txt.encode("utf-8", "replace")).hexdigest()
+        ent = texts.setdefault(
+            h, {"text": txt, "filename": os.path.basename(lic_path), "crates": set()}
+        )
+        ent["crates"].add(label)
+
     lines = []
     w = lines.append
     w("THIRD-PARTY SOFTWARE NOTICES")
@@ -91,6 +127,13 @@ def main():
     w("")
     w(f"Total third-party crates: {len(pkgs)}")
     w("")
+    if vendored:
+        w("-" * 76)
+        w("VENDORED THIRD-PARTY SOURCE (inside first-party crates)")
+        w("-" * 76)
+        for label, url in vendored:
+            w(f"  {label} — {url}")
+        w("")
     w("-" * 76)
     w("MANIFEST (crate version — SPDX license — source)")
     w("-" * 76)