Initial commit: Null DRM Official

Capture, decrypt, and restream toolkit with compiled-in app modules
(RTE, TG4, BBC), on-device MITM proxy, streamd control plane, and www.
BBC module.yaml is published (clear streams); other module values stay local.

apps/capture/README.md

@@ -0,0 +1,24 @@
+# capture
+
+One-shot phone MITM capture, hosted by the single binary as `drm capture`.
+
+```text
+apps/capture/
+  capturecmd/    the command body, imported by apps/cli
+```
+
+```bash
+./bin/drm capture                                              # passive: play anything
+./bin/drm capture --app rte                                    # launch, navigate by hand
+./bin/drm capture --app rte --channel rteone --auto-play \
+                  --wvd data/device.wvd                        # fully automated
+```
+
+Writes `outputs/<app>/<stamp>/` plus `latest/`. App modules are compiled in, so
+there is no modules directory to point at; `drm modules` lists what is available.
+
+**Full guide: [docs/capture.md](../../docs/capture.md)** — device setup, flags,
+discovering a new app, and troubleshooting.
+
+The catalog lookup that used to be a separate `tg4info` binary is now the
+provider-agnostic `drm catalog` (`apps/cli/catalogcmd`).