Add OSS license gate to Android (RND-1996)

.github/workflows/license-inventory.yml

@@ -0,0 +1,11 @@
+name: license-inventory
+on:
+  schedule:
+    - cron: "0 5 * * 1" # Mondays ~06:00 Europe/Stockholm
+  workflow_dispatch:
+jobs:
+  inventory:
+    permissions:
+      contents: write
+      pull-requests: write
+    uses: HedvigInsurance/prod-env/.github/workflows/license-inventory.yml@master

.github/workflows/license.yml

@@ -0,0 +1,16 @@
+name: license
+on:
+  pull_request:
+  push:
+    branches: [develop, "renovate/**"]
+jobs:
+  license:
+    uses: HedvigInsurance/prod-env/.github/workflows/license-gate.yml@master
+    with:
+      # Android ships to end-user devices (a distribution context), so block weak
+      # copyleft (LGPL/MPL/EPL) as well as forbidden licenses — not just the
+      # forbidden set that backends gate on.
+      gate-severity: "HIGH,CRITICAL"
+      # Warn-only pilot: reports findings but never fails the build. Review one run,
+      # populate `ignored-licenses` for any pre-existing hits, then remove this line.
+      enforce: false