docs: add CLA and NOTICE

CLA.md

@@ -0,0 +1,63 @@
+# AgentAuth Individual Contributor License Agreement
+
+Thank you for your interest in contributing to AgentAuth (the "Project"), maintained by
+Invaris Labs ("we", "us"). This Contributor License Agreement ("Agreement") describes the terms
+under which you make a Contribution to the Project. It protects you, other contributors, and
+Invaris Labs, and it makes clear what rights come with a Contribution.
+
+By submitting a Contribution to the Project (for example, by opening a pull request that is later
+merged), you accept and agree to the following terms for your present and future Contributions.
+
+## 1. Definitions
+
+"Contribution" means any original work of authorship, including code, documentation, tests, or
+other material, that you intentionally submit to the Project for inclusion in, or documentation
+of, the Project.
+
+## 2. Grant of copyright license
+
+You grant Invaris Labs, and recipients of software distributed by the Project, a perpetual,
+worldwide, non-exclusive, royalty-free, irrevocable copyright license to reproduce, prepare
+derivative works of, publicly display, publicly perform, sublicense, and distribute your
+Contributions and such derivative works, under the Project's current open-source license (the
+Apache License, Version 2.0) or under any other license terms Invaris Labs may choose to apply to
+the Project in the future, including relicensing all or part of the Project under different terms.
+
+## 3. Grant of patent license
+
+You grant Invaris Labs, and recipients of software distributed by the Project, a perpetual,
+worldwide, non-exclusive, royalty-free, irrevocable (except as stated in this section) patent
+license to make, have made, use, offer to sell, sell, import, and otherwise transfer your
+Contribution, where such license applies only to patent claims licensable by you that are
+necessarily infringed by your Contribution alone, or by combination of your Contribution with the
+Project. If any entity institutes patent litigation against you or any other entity alleging that
+your Contribution, or the Project to which you contributed, constitutes direct or contributory
+patent infringement, then any patent licenses granted to that entity under this Agreement for that
+Contribution terminate as of the date such litigation is filed.
+
+## 4. Your representations
+
+You represent that:
+
+- You are legally entitled to grant the licenses above. If your employer has intellectual property
+  rights in work you create, you represent that you have received permission to make Contributions
+  on behalf of that employer, or that your employer has waived such rights for your Contributions.
+- Each of your Contributions is either your original creation, or you have identified any
+  third-party material it includes and its license terms in the Contribution itself.
+- You are not aware of any claim, suit, or other action pertaining to your Contribution.
+
+## 5. No obligation
+
+You understand that the decision to include a Contribution in the Project is entirely at the
+discretion of Invaris Labs, and this Agreement does not obligate Invaris Labs to use it.
+
+## 6. No warranty
+
+Your Contribution is provided "AS IS", without warranties or conditions of any kind, either
+express or implied.
+
+---
+
+You indicate agreement to this Contributor License Agreement by commenting on a pull request as
+prompted by the CLA Assistant bot, or, once that check is in effect, by having a pull request
+merged into the Project.

NOTICE

@@ -0,0 +1,26 @@
+AgentAuth
+Copyright 2026 Invaris Labs
+
+This product is licensed under the Apache License, Version 2.0 (the
+"License"); see the LICENSE file in this repository for the full license
+text. You may not use the source code in this repository except in
+compliance with the License.
+
+------------------------------------------------------------------------
+
+Trademarks
+
+"Invaris", "AgentAuth", "Invaris AgentAuth", and any associated logos are
+trademarks of Invaris Labs. The License above governs the source code in
+this repository; it does not grant any right to use these names,
+trademarks, service marks, or logos, except as required for reasonable
+and customary use in describing the origin of the software (for example,
+"based on AgentAuth") and for reproducing the content of this NOTICE
+file.
+
+In particular: a fork or derivative work of this project may not be
+distributed, marketed, or represented as "AgentAuth", "Invaris
+AgentAuth", or as an official Invaris Labs project, and may not use
+Invaris Labs' name, trademarks, or logos in a way that suggests
+sponsorship, endorsement, or affiliation, without prior written
+permission from Invaris Labs.