docs: Full README — security-first architecture, 3 auth patterns tabl… …e, AVP tool filtering, anti-hallucination grounding, deployment proof