fix: correct journal interface defaults

[thiennamdinh]

Summary

• Default the general compose journal interface endpoint from ORIGIN instead of SECRET, and pass ORIGIN, INTERFACE, and JOURNAL_NAME into the journal container.
• Preserve the runtime-managed admin list during JOURNAL_UPDATE=1 record updates instead of reseeding it from INTERFACE_ADMINS.
• Update compose docs/examples and deployment image defaults for platform 1.4.3.
• Polish bridge admin UI copy by shortening the create button and matching selected policy segment color to the page's primary button color.
• Restore the root MIT LICENSE from the legacy sync-journal repository and add lightweight CONTRIBUTING.md, SECURITY.md, SUPPORT.md, issue templates, and a PR template.
• Update CHANGELOG.md with backfilled 1.4.2 notes and new 1.4.3 notes.

Testing

• ./records/tests/test.sh ./journal/target/debug/journal-sdk
• node scripts/sync-platform-package-versions.js
• cd services/explorer && npm test -- --watchAll=false AdminPanel.test.tsx JournalService.test.ts
• cd services/explorer && npm run build
• cd services/gateway && npm test -- --runInBand
• cd docs/info && npm run build
• COMPOSE_PROJECT_NAME=test SECRET=password podman compose -f deploy/compose/general/compose.yaml config

Notes/Risks

• Platform/package version is bumped to 1.4.3; journal-sdk crate version remains unchanged.
• Existing Explorer hook lint warnings and docs build warnings remain unchanged.
• Agent Recorder versioning remains separate from root platform VERSION and is documented in the new contribution guidance and PR template.