fix: accept bundled native runtime licenses

[i386]

The v0.76.1 producer now bundles NVIDIA redistribution terms under each Linux CUDA runtime. The packaging verifier rejected those otherwise valid archives because its strict path allowlist did not include licenses/, blocking native packages and images after the public release.

Accept regular files below the runtime licenses/ directory while retaining the existing checksum, safe-entry-type, product-manifest, runtime-tree-digest, and single-runtime validation. Add a focused fixture for the exact NVIDIA-CUDA-LICENSE.txt path.

Validation:

• node --experimental-strip-types scripts/image-matrix.ts validate
• representative v0.76.1 CUDA and upstream matrix expansion
• full TypeScript suite: 161 passed, 1 Docker-only skipped
• image-matrix coverage: 100% lines, branches, and functions
• actionlint -color
• git diff --check

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: a50ce247-91f6-4da7-b5af-eff883549ffb

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}