docs: close ODbL review and finish the remaining active TODO items

- New Docs/odbl-review.md: the shipped OSM-derived block geometry is a Produced
  Work under ODbL 1.0. Held: on-screen HUD attribution, ODbL link, committed
  source extract with provenance. Share-alike limited to the data layer; code/art
  stay CC0.
- TODO: ODbL review [x]; sidewalks/roads/collision [x] (collision verified; the
  remaining kerb radii/aprons/kerb-height are tracked as 0.1.1 patches).
- THIRD_PARTY_NOTICES + Docs/licensing.md updated to reference the posture.
- Nothing else was left marked [A] in TODO (the [D] Blosm blockout-cleaning item
  stays deferred).

Docs/licensing.md

@@ -21,6 +21,7 @@ Project-owned documentation is also dedicated under [CC0 1.0](../LICENSE). Third
 ## Open decisions
 
 - **Reference photography retention.** Decided 2026-11-06: reference images are **not** committed. Licensing is not the gate for local, private development use, so images are simply kept out of the repository (`Art/reference/` is gitignored) and their provenance stays in the local sidecars. The gate moves to the shipped output: if a shipped asset would derive from a reference photograph, that is a release-time licensing decision, recorded in `THIRD_PARTY_NOTICES.md` before the asset ships.
+- **ODbL posture for OSM-derived geometry.** Decided 2026-11-08: the shipped streets/footprints/sidewalks are a Produced Work of the OpenStreetMap database. Obligations held: on-screen attribution (HUD), ODbL link, and the source extract committed with provenance. Share-alike applies to the data layer only; project code and art stay CC0. Full review in [Docs/odbl-review.md](Docs/odbl-review.md).
 
 ## Provenance sources