Public-surface polish: narrative changelog, README install link, CLI copy

- Rewrite public changelog as a narrative product story (not an atomic per-wave dump)
- README install URL points at the kolm-ai/kolm repo + drops internal version tags
- CLI help/error text drops internal release-tag noise from user-visible strings
- .gitignore blocks internal planning + audit artifacts from re-entering the tree
- Stage outstanding polish (account UI, docs, scripts, verify hub, demo-live)
- sw.js cache bump to invalidate stale assets

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: sneaky-hippo

.github/actions/quality-gate-action/README.md

@@ -79,4 +79,4 @@ If any of the three fails, the gate exits non-zero and the workflow fails.
 
 ## License
 
-Apache-2.0. See [LICENSE](https://github.com/kolm-ai/kolmogorov-stack/blob/main/LICENSE).
+Apache-2.0. See [LICENSE](https://github.com/kolm-ai/kolm/blob/main/LICENSE).

.gitignore

@@ -124,3 +124,17 @@ reports/
 **/.kolm/config.toml
 captures.db
 **/captures.db
+
+# Internal planning / audit docs — never publish
+KOLM_*_PLAN.md
+KOLM_*_MANUAL.md
+FINAL_*.md
+STRATEGY.md
+DEMO.md
+audit-shots/
+.tmp-*
+.tmp-*.txt
+.tmp-*.py
+release-verify-*.err
+test-five*
+UsersuserAppData*/