Publish easyCris Community under Apache-2.0

[Rajioba1]

Summary

• publish the sanitized easyCris Community source as a single snapshot on top of the existing public repository history
• license the Community code under Apache-2.0 with public contribution, security, attribution, and trademark/commercial-offering guidance
• exclude Pro OLE implementation, private E2E infrastructure, internal validation datasets, generated caches, retired implementations, signing material, and private history
• add Windows Community CI and a separate Community release workflow

Publication gates

• exact tree match with private Community staging: 2d7f21ad0caf708e9f52b0ab6103a898c4f071ee
• local signed Community NSIS build and release validation passed
• npm ci --legacy-peer-deps, typecheck, and production frontend build passed
• targeted ActionToolbar test: 12/12 passed
• Cargo metadata/check passed with Apache-2.0
• license summary and isolation allowlist checks passed
• forbidden paths: 0
• Pro/OLE implementation paths and markers: 0
• machine-specific local username paths: 0
• first-party legal conflicts: 0
• Gitleaks 8.30.1: 0 unreviewed findings; two reviewed public test constants are an intentionally rejected development TURN secret and the RFC WebSocket handshake nonce

Known existing test debt

The non-gating full Vitest run reported 3,374 passing, 30 failing, 1 skipped, and 5 mock-related unhandled errors. These are the previously tracked H2 test-fixture/mock failures; this launch CI intentionally does not add test:run until that debt is resolved. The release-blocking build, Rust, license, isolation, and hygiene gates remain required by this PR.

Release scope

This PR publishes source only. No Community release tag or binary release is created here.