chore(deps): simplify dependency upkeep

Author: waleedlatif1

.github/workflows/dependency-governance.yml

@@ -2,6 +2,3 @@ Sim Studio
 Copyright 2026 Sim Studio
 
 This product includes software developed for the Sim project.
-
-Third-party notices for distributed runtime components are in
-THIRD-PARTY-NOTICES.md.

NOTICE

@@ -139,11 +139,6 @@ COPY --from=builder --chown=nextjs:nodejs /app/apps/sim/public ./apps/sim/public
 COPY --from=builder --chown=nextjs:nodejs /app/apps/sim/.next/standalone ./
 COPY --from=builder --chown=nextjs:nodejs /app/apps/sim/.next/static ./apps/sim/.next/static
 
-# Keep the project license and runtime notices next to the distributed app.
-# libheif's package license includes the LGPLv3 and incorporated GPLv3 text.
-COPY --from=pruner --chown=nextjs:nodejs /app/LICENSE /app/NOTICE /app/THIRD-PARTY-NOTICES.md ./
-COPY --from=deps --chown=nextjs:nodejs /app/node_modules/libheif-js/libheif/LICENSE ./third-party-licenses/libheif-LICENSE
-
 # Self-contained secrets-loading bootstrap (bundled in the builder stage). Runs
 # before the standalone server.js to hydrate process.env from the runtime secret.
 COPY --from=builder --chown=nextjs:nodejs /app/apps/sim/bootstrap.js ./apps/sim/bootstrap.js

THIRD-PARTY-NOTICES.md

@@ -98,8 +98,6 @@
     "vfs-snapshot-contract:check": "bun run scripts/sync-vfs-snapshot-contract.ts --check",
     "docs-manifest:generate": "bun run scripts/sync-docs-manifest.ts",
     "docs-manifest:check": "bun run scripts/sync-docs-manifest.ts --check",
-    "check:dependency-governance": "bun run scripts/check-dependency-governance.ts",
-    "check:dependency-security": "bun run scripts/check-dependency-advisories.ts",
     "mship:generate": "bun run scripts/generate-mship-contracts.ts",
     "mship:check": "bun run scripts/generate-mship-contracts.ts --check",
     "library:covers": "bun run scripts/generate-library-covers.tsx",