Document verified source rights and remaining permission requests

[ma7dev]

Summary

• Add a 39-source rights evidence register with pinned card/license URLs and document hashes.
• Close five unsupported permission dependencies: Absher, paired tool use, Pico, Commonsense Validation and SaudiIrony.
• Trace the last two through ARBML loaders to original CC0 repositories; verify selected source content.
• Fix exact web-source attribution links, including the missing Qusama URL.
• Preserve historical data; prepare permission requests for the remaining 12 sources / 2,759 rows. No messages sent and no permissions inferred.

Validation

• 27 tests pass.
• Public source declarations checked at pinned revisions.
• Commonsense: 1,000 validation text pairs matched with documented label mapping.
• SaudiIrony: all 257 selected text/label pairs matched; unselected differences are explicitly excluded from that claim.