readme: truth-sayer purge — honest v0.1.0 documentation

[SuperInstance]

Summary

This PR rewrites README.md to reflect what Pincher actually is at v0.1.0, rather than what earlier docs dreamed it would become.

What Was Removed

• Five Deployment Modes (Lighthouse, Codespaces, Tender, Container, Bare Metal) — none exist. No boot.sh, no mode flags, no Docker image on Docker Hub.
• Holodeck MUD — no implementation exists anywhere in the codebase.
• Baton Protocol tooling table — baton-create.sh, baton-read.sh, etc. don't exist in tools/.
• Dead image link to pincher-icon.jpg — assets are hermit-crab.jpg and logo.jpg.
• Aspirational file structure — boot.sh, CHARTER.md, ABSTRACTION.md, STATE.md, splines/, reflexes/ don't exist.
• Instant-boot claims without published benchmarks.

What Was Added

• Honest project description: a reflex runtime with CLI, vector store, sandbox.
• CLI command table matching pincher-cli/src/main.rs exactly.
• Architecture section with per-module implementation status (all 12+ modules verified).
• Feature flags documentation (onnx, landlock, wasmtime).
• "What This Is Not" section — explicit disavowal of fictional features.
• Near-term roadmap from real project docs (docs/ROADMAP.md, docs/MVP_CHECKLIST.md).
• Accurate file tree based on git ls-tree -r inventory.
• Every code reference (module names, CLI commands, SQL schema, file paths) verified against actual source.

What Was Preserved

• The Reflex Engine architecture (Teach → Match → Execute)
• The SQLite vector store with sqlite-vec
• The Bubblewrap sandbox with veto engine
• The .nail portable rig format
• The ONNX embedding engine with hash fallback
• The resource controller, capability tokens, RPC server
• The CLI as primary interface

A full audit report is at workspace/readme-truth-report.md in the agent workspace.