docs: synchronize superseded release status

[pillowtalk-Qy]

Closes #114

Scope authorization

#114 (comment)

Exact identity

• Base: 4ec4e2d8c5e8fbbc08572f544461cbd5e1c24d7d
• Head: 1bd277d64e3c4f18fb868ddccce4611115cdb3f7

Actual changes

• Synchronize README and security scope with the integrated M0-M5, deployed Fixture workflow, bounded standalone Live smoke, Gate C, and visual QA.
• Replace stale current dependency-advisory wording with the exact P0: remediate production dependency advisories blocking Gate C #102/Gate C resolution and a point-in-time audit limitation.
• Preserve the historical security NO-GO at its exact SHA while adding an upfront current release-resolution notice.
• Update real/mock and judge evidence maps to separate completed automated proof from pending RC, rehearsal, media, and submission evidence.

Non-goals

No runtime, test, schema, dependency, lockfile, Gate verdict, STOP policy, trust boundary, deployment, RC tag, media, rehearsal, or submission change.

Verification

• Node 22.23.1; pnpm 11.16.0
• Six-file writable-scope audit: PASS
• 32 local Markdown links: PASS
• Claim-risk scan: manually classified; remaining terms are explicit negations, bounded Live statements, or historical evidence
• pnpm format:check: PASS
• pnpm check: PASS, 52 files / 1,264 tests; bounded coverage 100%; production smoke PASS
• pnpm audit --prod --audit-level=moderate: PASS, no known vulnerabilities
• Public production smoke: PASS, 9/9
• git diff --check: PASS

Trust statement

The public site remains Fixture-only with hosted Live unconfigured. The standalone Live observation is exact-context evidence only. Moss remains an integration fork with officialRelease=false. MANUAL_REVIEW is not approval, Clear402 is not authentication, and no wallet/signing/submission capability is claimed.

Risk and rollback

Documentation-only. Revert this squash commit if any current-status statement is shown to exceed the linked exact-SHA evidence.

Remaining gate

Exact-head CI and detached clean SINGLE_OPERATOR_QA are required before Ready/merge.

[pillowtalk-Qy]

SINGLE_OPERATOR_QA_PASS / REVIEW_APPROVED. Frozen head 1bd277d. Detached clean worktree, frozen install, six-file path audit, 32 local links, full Node 22 pnpm check (52 files / 1,264 tests), production audit, public 9/9 smoke, and diff check all passed. Exact-head quality-gate run 31303954207 succeeded. No independent-review claim is made. Conclusion: READY_TO_MERGE; documentation-only rollback is the squash commit.