Portrait decoder notices

HEIC/HEIF conversion uses heic-to 1.6.6's CSP-safe libheif 1.23.6 build,
including libde265 1.0.16, licensed under LGPL-3.0-or-later.
Upstream source and reproducible build instructions:
https://github.com/hoppergee/heic-to/tree/v1.6.6
https://github.com/strukturag/libheif/tree/v1.23.6
https://github.com/strukturag/libde265/tree/v1.0.16
Exact npm source bundle:
https://registry.npmjs.org/heic-to/-/heic-to-1.6.6.tgz

This application adds a source-verified adapter to bound the generated codec's
heap to 192 MiB and expose heap inspection. The complete modification and
Vite build plugin are available at /licenses/hotel-libheif-loader.mjs.txt.
The application-specific caller configures libheif's existing context security
limits before parsing. The library is lazy-loaded as a separate worker module.
The source bundle above contains the full upstream source/build instructions.
The published adapter can be rebuilt with that pinned package and Vite 7.

The full LGPL license is available at /licenses/heic-to-LICENSE.txt and its
incorporated GPL terms at /licenses/GPL-3.0.txt.

Server JPEG validation uses jpeg-js 0.4.4, including the Apache-2.0 decoder
and Adobe/BSD-style encoder. Copyright and full license texts:
/licenses/jpeg-js-LICENSE.txt
https://github.com/jpeg-js/jpeg-js/tree/v0.4.4