v0.4.1

Not on PyPI/npm yet — the documented install line is a git+https URL and works today.

Portable proof-certificate checking — check the proof, not the promise

See the README for install, a 30-second quickstart with real output, and an HONEST SCOPE section stating what this does and does not prove.