docs: link published OIC research paper

[veraxis-protocol]

Summary

• add the published research preprint DOI badge
• document the bounded paper claims and exact archived engineering snapshot
• add the Zenodo citation

Boundaries

This documentation-only change does not alter engineering status, authorize semantic implementation, certify the repository, validate substantive legal or semantic claims, or merge PR #38.

Verification

• exactly one changed file: README.md
• git diff --check: PASS
• make verify: PASS using the repository environment
• make falsify: local runner reached pytest but exited -11; GitHub CI is authoritative for clean-runner disposition

[inventor1975]

Approved.

Documentation-only, one file, +40/−0; the stated boundaries match the diff.

Verified rather than assumed:

• the DOI resolves, and title and author match the README exactly;
• 3^8 = 6561, consistent with eight obligations at three states each;
• the Zenodo record itself names commit 914830c, so the snapshot binding holds from both sides — that is better than usual, and worth saying.

Two non-blocking notes, carried over from the review already posted:

1. "kills five deliberately defective aggregators" is a refusal-only claim. A battery of must-kill cases alone is satisfied by an aggregator that kills everything. One clause stating that the canonical aggregator SURVIVES all 6,561 states would close it — the difference between "we killed five bad ones" and "we killed five bad ones and the good one lived". Same point as ORL-R1-01 in today's TDD review.
2. "Its bounded executable checker" is not locatable from this repository: at 914830c there are 350 files and no eight-obligation aggregator among them. One sentence saying where the checker lives would let a reader follow the claim.

Neither blocks a documentation change.

Approval issued on Vitaly Reznik's explicit instruction; the review preceding it is a critical collaborator review. independent_review_claim = FALSE.