SOURCES: stop promising what the deploy does not do

The media policy said tier-3 material is "never redistributed, in any form: never committed, never in a packaged build, never in a distributed render." The deploy has been contradicting that: tools/deploy-stellate.sh rsyncs found/, the root-anchored --exclude '/*.wav' never touches it, and…

• Decision: keep the deploy, drop the promise. So this rewrites the policy header to say what actually happens -- the fetched media is served from the public web -- and rewrites the per-item promises into…

• What is deliberately NOT removed: the licence facts. Every ⚠, every "no licence chain", every NC/ND flag stays exactly where it was, and the header now says plainly that the terms still bind, that serving…

• Also added: a note for anyone forking, since the risk is a decision the repo owner made and does not travel with the code -- with a pointer at the rsync filter that is where a stricter policy would be enforced.

• One "never redistributed" survives, at the MIDI trove, because it is true: found/midi/ is excluded from the rsync and the corpus lives off-repo on the external drive.

Verified: doc-counts PASS.

▶ Play it: Dial Tone Prophet — the genre built out of recorded and synthesized voices https://stellate.app/?genre=spokenword&seed=3280&path=196.11721,215.11754,177.11754&xdur=13.122

a649959 https://github.com/aboard-io/stellate/commit/a6499598585054772e1afa23498997c3efdb6cdd