Assay third-party notices

Original Assay code is dual-licensed MIT OR Apache-2.0. Third-party
components retain their own licenses. The Cargo lockfiles pin exact versions
and registry checksums; the adjacent dependency inventory records declared
licenses, not a relicensing of those packages. Source builds retrieve their
original notices from the upstream packages. Distributed binary wheels must
retain applicable dependency license and notice text.

Apache Arrow and Parquet: Apache-2.0, Apache Software Foundation.
SQLite sqllogictest corpus: official upstream frozen check-in
ab599cbdd0976a63c5cfc7755588f716a7621f27; fetched separately with its
license/source hashes, not bundled as benchmark data. SQLite source is
public domain; corpus files retain their original notices.
Benchmark reference engines and optional Python integrations are separate
packages: DuckDB (MIT), Polars (MIT), DataFusion and PyArrow (Apache-2.0),
pandas (BSD-3-Clause). No upstream engine executes Assay SQL as a fallback.
See benchmark source manifests for generator/query provenance.
