docs: surgical README improvements + publish technical one-pager

[AaronRoeF]

Surgical edits to profile/README.md (structure + puppy intro untouched) plus a new profile/technical-one-pager.md, linked from the README.

README changes (5, all surgical)

1. Attribution fix (correctness). The Zero-Trust Framework Alignment intro attributed the "a signed JWT proves who called an API, not what agent / prompt / model / policy" enumeration to the Anthropic eBook ("the core argument in that document"). That enumeration is ours, not the eBook's — verified against two independent summaries; the eBook's actual identity claim is "cryptographically-rooted identity / a label is trivial to forge." Reworded to credit the eBook accurately and own the sharper framing.
2. AGT adoption stats added inline (4,250+ stars, 10/10 OWASP Agentic Top 10).
3. VADP → "scope-chain delegation (monotonic narrowing)" (2 places) — adopting Imran's own term.
4. CBOM row added to the TRACE primitives table (post-quantum readiness).
5. Link to the new one-pager.

New file: profile/technical-one-pager.md — the 2-minute version (public adaptation of the partner one-pager; internal banner + direct exec emails removed, contact routed to GitHub Discussions).

@imran — for your review

• I propagated your one-pager edit into the README: "VADP" → "scope-chain delegation (monotonic narrowing)" in both spots. Please confirm that's the term you want everywhere, and whether "VADP" should be fully retired (it still appears in AGT's own proposal docs). Open Q from Slack: what did VADP stand for?
• AGT stats used: 4,250+ stars / 10/10 OWASP. Adjust if you'd prefer different figures.

Deliberately held back (dependency-gated, not in this PR)

• The eBook's "six layers" count (intro paragraph) is unverified — secondary sources say 8 implementation phases / 5 threat categories. Left as-is pending the PDF verify pass.
• Product-name consistency: the one-pager uses "OPAQUE Confidential AI"; the README's technical section uses "OPAQUEProvider" / "Opaque Managed Runtime." Not reconciled here — flagging for a naming decision.

🤖 Generated with Claude Code