chore(release-readiness): PyPI/Zenodo hygiene — SAL-7.1 alignment + environment gate

- publish.yml: add `environment: name: pypi, url: https://pypi.org/p/zpe-music`
  (OIDC trusted-publisher gate; was missing — PyPI would reject without it)
- pyproject.toml: license → LicenseRef-Zer0pa-SAL-7.1 (aligns with LICENSE file)
- CITATION.cff: license → LicenseRef-Zer0pa-SAL-7.1; add date-released: 2026-05-03
- .zenodo.json: license → LicenseRef-Zer0pa-SAL-7.1; add version: 0.1.0

PyPI release tag not pushed — pending publisher slot registration by orchestrator.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Zer0pa-Architect-Prime

.github/workflows/publish.yml

@@ -8,6 +8,9 @@ on:
 jobs:
   pypi:
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/zpe-music
     permissions:
       id-token: write
       contents: read

.zenodo.json

@@ -14,7 +14,8 @@
     "score-roundtrip",
     "note-expression"
   ],
-  "license": "LicenseRef-Zer0pa-SAL-7.0",
+  "version": "0.1.0",
+  "license": "LicenseRef-Zer0pa-SAL-7.1",
   "upload_type": "software",
   "related_identifiers": [
     {

CITATION.cff

@@ -14,6 +14,7 @@ keywords:
   - deterministic-codec
   - score-roundtrip
   - note-expression
-license: LicenseRef-Zer0pa-SAL-7.0
+license: LicenseRef-Zer0pa-SAL-7.1
+date-released: "2026-05-03"
 contact:
   - email: architects@zer0pa.ai

pyproject.toml

@@ -8,7 +8,7 @@ version = "0.1.0"
 description = "Canonical symbolic-score codec with a bounded note-local expression refinement"
 readme = "README.md"
 requires-python = ">=3.10"
-license = {text = "LicenseRef-Zer0pa-SAL-7.0"}
+license = {text = "LicenseRef-Zer0pa-SAL-7.1"}
 authors = [{name = "Zer0pa (Pty) Ltd"}]
 keywords = [
     "musicxml",