Complete Quaternius intake record: verify SHA-256 and add the download date

docs/npc-model-sourcing.md

@@ -56,7 +56,8 @@ locally in `tmp/npc-research/quaternius/` with the licence and mirror notes.
 
 Source: [Quaternius Ultimate Modular Characters](https://quaternius.com/packs/ultimatemodularcharacters.html)
 and [Ultimate Modular Women](https://quaternius.com/packs/ultimatemodularwomen.html),
-CC0 1.0. The Ducz mirror is a browser builder over the same packs; it adds 21
+CC0 1.0. Download date: 2026-11-03 (via the Ducz Character Creator browser export).
+The Ducz mirror is a browser builder over the same packs; it adds 21
 outfits and a shared skeleton. The three full GLBs are the initial scope; the
 21-part builder is a fallback for role coverage, not the default.