build(site): [SITE-07] distribute verified console package and embedded notices

refactor/risks.json

@@ -690,11 +690,16 @@
         "refactor/changes/2026-09-15-SITE-07-console-commonjs.md",
         "refactor/baselines/console-esm-provenance.json",
         "refactor/changes/2026-09-15-SITE-07-console-esm.md",
-        "scripts/site-vendor/console/reconstruction.ts"
+        "scripts/site-vendor/console/reconstruction.ts",
+        "refactor/baselines/console-embedded-notices.json",
+        "refactor/baselines/console-notices-validation.json",
+        "refactor/changes/2026-09-15-SITE-07-console-notices.md",
+        "scripts/site-vendor/console/embedded-notices.ts",
+        "docs/THIRD_PARTY_NOTICES.md"
       ],
       "compatibleResolution": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
       "closureCriteria": "固定上游版本/内容差异、完整组件许可与分发 notices，兼容测试通过；仅当前上游许可证名称不足以关闭。",
-      "workspaceState": "All 100 vendor module bodies and the Parcel prelude/invocation exactly reproduce from fixed official archives; all cross-package import edges verified. Original full lockfile is not recovered. Complete embedded attribution and public notices remain open; runtime unchanged."
+      "workspaceState": "All 100 vendor module bodies and Parcel loader exactly reproduce from fixed archives. Public notices now deliver 32 package licenses, the Parcel license, and exact Chromium/Sultan Tarimo embedded headers; all 53 site notice files passed byte-for-byte HTTP checks in three engines. Remaining embedded attribution is explicitly tracked in console-embedded-notices.json. Original full lockfile is not recovered; runtime unchanged."
     },
     {
       "id": "SDK-01",