Native runtime notice provenance

sherpa-onnx-node and its platform packages are installed at version 2.0.1.
The npm registry metadata records gitHead af2d8d81dbfa61c4cea4c568da78f3982edca005
for sherpa-onnx-node and sherpa-onnx-darwin-arm64. The Apache-2.0 license here is
copied verbatim from:
https://raw.githubusercontent.com/csukuangfj/sherpa-onnx/af2d8d81dbfa61c4cea4c568da78f3982edca005/LICENSE

The pinned sherpa-onnx source's cmake/onnxruntime-{osx-arm64,osx-x86_64,win-x64,
linux-x86_64}.cmake files select ONNX Runtime 1.28.2. Its MIT license and upstream
third-party notices are copied verbatim from:
https://raw.githubusercontent.com/microsoft/onnxruntime/v1.28.2/LICENSE
https://raw.githubusercontent.com/microsoft/onnxruntime/v1.28.2/ThirdPartyNotices.txt

These files supplement the legal files present in installed npm packages; they
do not claim every optional native feature or alternative runtime build is
covered. Review and update this provenance when changing sherpa-onnx versions
or using a custom build. Caption model weights are downloaded separately; their
attribution and license links are in the project's THIRD_PARTY_NOTICES.md.
