freeze initial panda-rpki staging

fixtures/minimal/README.md

@@ -0,0 +1,11 @@
+# Minimal fixture policy
+
+This directory reserves the deterministic, locally generated RPKI fixture
+contract. It intentionally contains no live RIR archive, private TAL/TA, key,
+customer data, or source-repository bytes. The M4 Docker smoke uses standard
+TAL/TA files from `fixtures/` and an explicit bind-mounted repository from the
+native test fixture tree; that repository is not shipped in the image while
+its redistribution and provenance are pending. M5 must add or approve the
+smallest redistributable snapshot/delta fixture and record its generator,
+hashes and license in `fixtures/manifest.toml` before using it as public
+compatibility evidence.