Bundled video-player source and licenses

Video.js 8.23.7: Apache-2.0; the complete license is in LICENSE.
Readable source/build tools:
https://github.com/videojs/video.js/tree/v8.23.7

The existing compiled player/plugin assets are retained in this maintenance
release; no dependency upgrade or new upstream build is claimed.

Active plugin sources (use the version's upstream build instructions):
videojs-contrib-ads 7.5.2:
https://github.com/videojs/videojs-contrib-ads/tree/v7.5.2
videojs-playlist 5.2.0:
https://github.com/videojs/videojs-playlist/tree/v5.2.0
videojs-playlist-ui 5.0.0:
https://github.com/videojs/videojs-playlist-ui/tree/v5.0.0
videojs-contrib-quality-levels 4.1.0:
https://github.com/videojs/videojs-contrib-quality-levels/tree/v4.1.0
videojs-ima 1.5.2 (published npm package; its embedded VERSION is stale 1.5.1):
https://registry.npmjs.org/videojs-ima/1.5.2
https://github.com/googleads/videojs-ima/tree/v1.5.2
VAST client 2.2.3:
https://registry.npmjs.org/vast-client/2.2.3
https://github.com/dailymotion/vast-client-js/tree/v2.2.3

The two ad bundles above match the official npm package bytes exactly.
The old PHP cache labels 1.11.0/3.2.0 were not their actual bundled versions;
this release corrects those labels without upgrading these optional adapters.
Their Apache-2.0/MIT notices are in ads/LICENSE-videojs-ima.txt and
ads/LICENSE-vast-client.txt. The retained readable legacy VAST plugin in 3/
is covered by 3/LICENSE (MIT, The Onion).

Individual plugin notices/versions embedded in assets remain authoritative.
Older numbered folders are retained compatibility assets and are not evidence
of current Flash/RTMP browser support. Selecting an HTML5 player cannot make a
public media origin private. Optional advertising service terms/data use are
documented in the plugin readme.