docs: README badges in the standard order

[WilliamSmithEdward]

The README badges in the order and form of repo-standards' STANDARD.md section 9, the same in every repository: how to get it, whether main is healthy, how it is secured, and what it is.

• Before: CI, Security, OpenSSF Scorecard, Latest release, MIT license, Microsoft 365 Excel on Windows x64, Single class module runtime.
• After: Latest release, Downloads, CI, Security, Malware scan, OpenSSF Scorecard, License: MIT, Microsoft 365 Excel on Windows x64, Single class module runtime.

Workflow badges are GitHub's own for main; every link is absolute, since PyPI does not rewrite relative links; alt texts follow the standard. The tagline moves below the badges, which sit directly under the title.

Every badge image was fetched and renders a value. The repo-standards rescan, which now checks this, passes.