Model blobs (content-addressed, permanent)

Permanent release holding every model blob by SHA-256. Never deleted or re-uploaded; new model versions are new blobs plus a manifest bump. See README for the table and licences.