The orphan security rewrite removed the bash systemd installer; bringing it
back so an unattended bootstrap path exists. THIRD_PARTY_LICENSES.md is
restored for legal completeness (will need a refresh as deps evolve).
.gitignore updated to allow THIRD_PARTY_LICENSES.md.