docs: record Rust verifier 1.0.2 release

[Dynamicfeedai]

Summary

• record crates.io dynamicfeed-verify 1.0.2 as published and registry-verified
• bind the release record to source/tag commit 95e033efd252e9e97029c0ef97a3ccddad9b6351 and tag rust-v1.0.2
• record the registry timestamp, crate size, matching crates.io/GitHub SHA-256 digest, and clean-install policy outcomes
• keep PyPI 1.0.3 and npm 1.0.2 explicitly pending because publishing credentials are unavailable
• preserve the explicit limitation that signed anchor attachment is not full RFC 3161 or OpenTimestamps proof verification

Scope

Documentation only: README.md and SECURITY.md. No client source, tags, packages, or production state changed.

Validation

• python3 scripts/check_rotation_policy.py
• GitHub GFM render API for both changed Markdown files
• relative Markdown link resolution check
• live external link checks for the four documented Dynamic Feed endpoints
• rust-v1.0.2 source-commit identity check
• changed-file scope check
• git diff --check