fix: address codex review BLOCKERs and SHOULD-FIXes; update KNOWN_ISSUES

initial public release: code, README, KNOWN_ISSUES

initial commit