test: verify bundled decoders and artifact budgets (#7)

THIRD_PARTY_NOTICES.md

@@ -33,6 +33,37 @@ repository에 남아 있지 않습니다. 이 저장소는 해당 binary를 stan
 위 checksum은 Google Fonts의 현재 `NanumGothic-Regular.ttf`와 동일함을
 2026-07-29에 확인했습니다.
 
+## Draco decoder
+
+- 역할: glTF geometry decompression
+- upstream: <https://github.com/google/draco>
+- license: Apache License 2.0
+- license text: <https://github.com/google/draco/blob/main/LICENSE>
+- distribution: 설치된 Three.js의 `DRACO_GLTF_CONFIG` import가 production build에
+  version 일치 hashed JavaScript/WASM asset으로 포함합니다.
+
+## Basis Universal transcoder
+
+- 역할: KTX2/Basis Universal texture transcoding
+- upstream: <https://github.com/BinomialLLC/basis_universal>
+- license: Apache License 2.0
+- license text: <https://github.com/BinomialLLC/basis_universal/blob/master/LICENSE>
+- distribution: 설치된 Three.js의 `KTX2Loader` import가 production build에
+  version 일치 hashed JavaScript/WASM asset으로 포함합니다.
+
+## KTX2 E2E fixture
+
+- 역할: production subpath에서 Basis Universal transcoder 실제 실행 검증
+- upstream:
+  <https://github.com/mrdoob/three.js/blob/42f66a1620be72e497a0bb3bdc7663d21d43169a/examples/textures/ktx2/2d_etc1s.ktx2>
+- license: MIT,
+  <https://github.com/mrdoob/three.js/blob/42f66a1620be72e497a0bb3bdc7663d21d43169a/LICENSE>
+- local path: `tests/fixtures/viewer3d/BasisTexture.ktx2`
+- SHA-256:
+  `e56ddcc757fc73ff06bb0dac2a3533ce79c1e196ad895a3ff7dcc4d9de6b9d5d`
+- distribution: E2E가 same-origin request로만 제공하며 production artifact에는
+  포함하지 않습니다.
+
 ## Runtime libraries
 
 - Three.js — MIT, <https://github.com/mrdoob/three.js>