Brief Design Summary

This PR syncs repository and reviewer-facing documentation after the sbom-diff-and-risk v0.9.0 GitHub Release.

It updates current release wording, release notes links, reviewer evidence commands, and copyable GitHub Actions consumer examples from v0.8.0 to v0.9.0.

This is docs/example-only. It does not change runtime behavior, package metadata, workflows, release tags, or publishing status.

Files Changed

• README.md
• tools/sbom-diff-and-risk/docs/reviewer-brief.md
• tools/sbom-diff-and-risk/docs/reviewer-evidence-pack.md
• tools/sbom-diff-and-risk/docs/github-actions-consumer-example.md
• tools/sbom-diff-and-risk/examples/github-actions-consumer.yml
• tools/sbom-diff-and-risk/examples/github-actions-policy-consumer.yml

Validation

• git diff --check passed.
• Confirmed no stale v0.8.0 / 0.8.0 / release-notes-v080 references remain in touched current-release docs/examples.
• Parsed both copyable GitHub Actions example YAML files with PyYAML.
• Confirmed relative link targets exist.
• Checked touched files for Unicode Cf/Cc control or format characters; no non-tab/newline matches found.
• Confirmed package metadata and runtime version remain 0.9.0.
• Confirmed .github/workflows is unchanged.
• No Python tests run because this is docs/example-only.

Out of Scope

• No runtime behavior changes
• No package version changes
• No workflow changes
• No tag or GitHub Release
• No PyPI/TestPyPI publishing
• No production PyPI workflow