docs: surface v4.1.0 current stable SDKs in README

[Davincc77]

Summary

Updates the public-facing README so GitHub visitors see the current x.klickd v4.1 stable state, while preserving the repo's deliberate, cautious framing.

• Splits the header version badge into two honest badges: .klickd format v4.0.0 GA (wire envelope, unchanged) and SDKs v4.1.0 stable.
• In the existing "Current GA" version section, adds that the current stable reference SDKs are v4.1.0 (@klickd/core@4.1.0 on npm, klickd==4.1.0 on PyPI) and v4.0.0 was the prior stable SDK release — the natural place for this note.
• Clarifies the 4.1.0 SDKs read/write the same v4.0.0 GA wire envelope: a packaging/SDK minor release with no payload, schema, or crypto change.
• Reaffirms the separately archived x.klickd v4.1 evidence pack (DOI 10.5281/zenodo.20459934) is candidate-track benchmark evidence only, with no stability/compatibility guarantees.

Coherence with requirements

• Public name remains x.klickd; no mention of the internal Chimera codename anywhere in README.
• v4.1 evidence-pack DOI 10.5281/zenodo.20459934, npm @klickd/core v4.1.0, PyPI klickd v4.1.0, homepage https://klickd.app/klickdskill — all present and correct.
• Claims stay scientifically cautious: no universal native support, no automatic GDPR / EU AI Act compliance, no superiority claims.
• No new git tag, GitHub Release, or Zenodo DOI created; no skill files renamed; klickd.app student/Kai skills untouched.

Testing

• python verify_vectors.py → 77/77 passed
• node verify_vectors.mjs → 47/47 passed (13 skipped: optional hash-wasm not installed)
• python scripts/validate_v4_1_candidate_mapping.py → OK, 42 artefacts validated, public-surface codename-clean check passes
• README confirmed Chimera-free

🤖 Generated with Claude Code