Collect licence notices for the npm trees, the Python sidecars, the staged
native runtimes and the bundled model packs, merge them into
THIRD_PARTY_NOTICES.json and .txt, and ship them as resources/notices.
The merge fails the build when a dependency has no licence text and the
reviewed allowlist gives no reason.
Refs #1941
