Consolidate public documentation and finalize PyPI guidance

.gitignore

@@ -49,6 +49,3 @@ raw_earlyon.md
 logs/
 docs/*.pth
 
-# local agent config, never ship
-CLAUDE.md
-.claude/

CHANGELOG.md

@@ -61,7 +61,7 @@ format follows [keep a changelog](https://keepachangelog.com/en/1.1.0/).
   v1→v2 migration; a post-install wheel smoke script
   (`scripts/smoke_test.py`); a bounded seeded CUDA evidence runner
   (`scripts/evidence_run.py`); `MANIFEST.in` so the sdist stops shipping a
-  partial test tree; `SECURITY_REVIEW.md` and `docs/MIGRATION.md`.
+  partial test tree; `docs/SECURITY_MODEL.md` and `docs/MIGRATION.md`.
 - **staged deployment** (`earlyon.staged`): a documented protocol (ordered
   stages emitting continuation features + exit logits, routing between
   stages) with a verified reference splitter for Sequential backbones —

README.md

@@ -7,7 +7,7 @@
   <img alt="python" src="https://img.shields.io/badge/python-3.10+-blue">
   <img alt="coverage" src="https://img.shields.io/badge/coverage-95%25-brightgreen">
   <img alt="mypy" src="https://img.shields.io/badge/mypy-strict-blue">
-  <img alt="version" src="https://img.shields.io/badge/version-0.3.0-lightgrey">
+  <a href="https://pypi.org/project/earlyon/"><img alt="pypi" src="https://img.shields.io/pypi/v/earlyon"></a>
   <a href="LICENSE"><img alt="license" src="https://img.shields.io/badge/license-MIT-green"></a>
 </p>
 
@@ -46,16 +46,16 @@ result.confidence                        # softmax confidence where it answered
 
 ## Install
 
-PyPI publication is pending trusted-publisher configuration. The v0.3.0
-GitHub tag is the current installable release:
+```bash
+pip install earlyon==0.3.0
+```
+
+Or from the GitHub tag:
 
 ```bash
 pip install git+https://github.com/sohams25/earlyon@v0.3.0
 ```
 
-(Once PyPI publication completes, `pip install earlyon==0.3.0` will work;
-until then it does not.)
-
 From source for development:
 
 ```bash