If you distribute the game via the web then you can make the source available by web, however as soon as you’ve compiled the runtime you are unable to sell the game anyway due to the conditions of the license.
The only current web plug-in I’m aware of is Burster. You do not have a license issue here as burster keeps the player and .blend seperate (you host the .blend) and also Burster offer encryption certificates for a very reasonable price. At the minute I think this is the only safe way to commercialize a blender game, but of course that limits it to being web-only.
Yes as far as I’m aware you have to also supply any python script if you distribute a compiled runtime.