add OpenBSD TA constraints and localhost TLS examples

THIRD_PARTY_NOTICES.md

@@ -12,7 +12,10 @@ binary distributions. Container OS package notices remain under
 
 Python cryptography and OpenSSL are external test tools, not bundled source.
 Consult their installed license notices when distributing a test environment.
-No production trust-anchor or repository data is included in this source tree.
+The `tals/` directory contains unmodified OpenBSD-distributed RIR TALs and
+resource constraints. Their [provenance and checksums](tals/README.md), original
+notices and referenced terms apply separately from the source-code license.
+No RIR repository objects or private keys are bundled.
 
 | Package | Locked version | Declared license |
 | --- | --- | --- |