CMMS fork: re-vendor all runtime deps locally, strip analytics

Upstream loads zip.js, OpenCV.js, WireBender (JS+WASM) and Google Fonts
from CDNs at runtime, and includes a Google Tag / gtag.js snippet. The
CMMS deployment forbids external requests. Changes:

- docs/vendor/ — local copies of opencv.js (Apache-2.0), zip.min.js
  (BSD-3-Clause), WireBender.{js,wasm} (AGPL-3.0/commercial, source at
  github.com/dev-lab/WireBender), and the three Google fonts (OFL, latin
  subset). SOURCE.txt records provenance.
- studio.html / schema.html — zip.js + opencv.js + fonts @import point at
  docs/vendor/.
- inspect-traces.js / schema/layout.js — WireBender import() + locateFile
  point at docs/vendor/wirebender/.
- every *.html — Google Tag / gtag.js snippet removed.

No behaviour change; kicad-symbols zip was already bundled + local.
CMMS embedding hooks (window.PCBRETRACE_CONFIG, save-back, AI bridge)
land in a later commit.

docs/inspect-traces.js

@@ -44,9 +44,9 @@ const TraceConfig = {
 	 */
 	RECALC_MODE: 'single',
 	/** WireBender WASM module entry point. */
-	WASM_URL: 'https://dev-lab.github.io/WireBender/latest/WireBender.js',
+	WASM_URL: 'vendor/wirebender/WireBender.js',
 	/** WireBender WASM binary. */
-	WASM_BINARY_URL: 'https://dev-lab.github.io/WireBender/latest/WireBender.wasm',
+	WASM_BINARY_URL: 'vendor/wirebender/WireBender.wasm',
 };
 
 /**