v1.17.1 — Documentation quality pass

Documentation quality pass

Diwall has moved fast through three release cycles in quick succession
(v1.15.2, v1.16.0, v1.17.0) — deterministic run verdicts, a unified run
identity, passive WAF detection, scenario checkpoints, stable Set-of-Mark
resolution, and cross-origin iframe support. This release brings every
public document up to the same standard: complete, accurate, and genuinely
useful to read.

Documentation

• docs/MANUEL.md — full pass through 1.17.1. New sections cover the
  deterministic etat verdict, operation_id, the passive WAF signal,
  --replay-verifier, --checkpoint, --som-rafraichir, and cross-origin
  iframe actions (cliquer_iframe/remplir_iframe), each with a working
  example. Action and CLI flag tables, and the output JSON reference, updated
  to match. The stealth benchmark walkthrough now uses a quantitative
  fingerprint-count method instead of a visual screenshot comparison.
• README.md — usage example corrected, vault encryption status
  clarified (fully supported since v1.5.0), capabilities and requirements
  tables extended through v1.17.0. The long-superseded "Roadmap (v1.7)"
  section removed — those items (Shadow DOM, cross-origin iframes) have been
  shipped for several release cycles now.
• docs/FAQ_LLM.md — cross-origin iframe support documented, boussole
  field reference and version history extended through v1.17.0.
• docs/GUIDE.md, docs/GUIDE_EXPLORATION.md — Citizen Navigation
  summary, WAF signal guidance, and v1.17.0 exploration checklist items
  added for operators and exploring agents.

No functional change to shot.py or rpa.py — this release is documentation
catching up to capability, not a code fix.