Document verified 1.0 release evidence

[mikonyaa]

Summary

• replace pre-release wording with the published 1.0 verification state
• record independent checksum, signature, notarization, stapling, Gatekeeper, and universal-binary checks
• distinguish the still-unpublished Homebrew tap from completed release work
• preserve simulator-only and advisory-database limitations

Why

The verification and security documents still described signing, notarization, and publication as unresolved release blockers after version 1.0.0 had already been published. This made the public evidence internally inconsistent with the release assets and README.

User impact

Readers now see the verified distribution state of version 1.0.0 without overstating Xcode 27, physical-device, Homebrew tap, or future dependency-audit coverage.

Verification

• swift test: 90 tests passed
• documentation links: 36 local targets passed
• publication hygiene: 137 candidate files passed
• git diff --check
• independently downloaded all 1.0.0 assets and verified SHA-256, package signature, stapled ticket, Gatekeeper acceptance, ZIP signature/notarization, and arm64+x86_64 architectures