Launch Bounded Loops & Graphs with paper and visible graph proof

[varun369]

Summary

• Present the repository as Bounded Loops & Graphs, with a keyless first run and lightweight loop and graph replays.
• Show a completed graph and node evidence in the README monitor section; retain the empty workspace image only as setup context.
• Link the published paper in the README header, graph guide, npm README, and future PyPI project metadata.
• Reconcile the reference-graph guide with the current seven graphs and 28 distinct loop packages.
• Refresh the development lockfile to patched httpx2/httpcore2 2.13.1 after CI reported three CVEs in httpx2 2.10.0.
• Fix three type-check errors in the existing Hermes plugin test recorder without changing production behavior.

Evidence boundaries

The paper's experiments use v0.6.6. The current software remains v0.7.6; this PR makes no bounded-loops runtime or API changes. The lockfile affects the repository/CI environment, not published package dependency metadata. The new GIFs are labeled replays, not fresh executions. The README distinguishes the checked-in run receipt from the archived local graph replay.

Verification

• git diff --check passed.
• pyproject.toml parsed and retained version 0.7.6 with the paper URL.
• README/package contract suite: 22 passed. Documented runnable examples: 6 passed. Focused MCP contract suite: 40 passed; separate MCP regression review: 88 passed, 1 skipped.
• Exact exported development lockfile: no known vulnerabilities found with pip-audit 2.8.0; uv lock --locked passed.
• Full mypy bounded_loops tests: no issues in 528 files. Hermes plugin tests: 12 passed. Independent Python review passed.
• Local image targets and added links were checked. Security review found no secrets or licensing issue.
• No research experiments were rerun, per the launch scope.

Release note

The npm and PyPI registry listings remain at 0.7.6 until a separate coordinated package release. Merging this PR updates GitHub source and presentation, not already published package metadata.