fix: use hf.co (CORS-open) in verify URLs

README.md

@@ -71,13 +71,13 @@ We took **Qwen3.5-4B** (32K context) and extended it to **128K context** via YaR
 
 
 <p align="center">
-<a href="https://cambriantech.github.io/forge-alloy/verify/#huggingface.co/continuum-ai/qwen3.5-4b-code-128k-forged/resolve/main/qwen3.5-4b-code-128k-forged.alloy.json@a4da7dea5bb8d3d9">
+<a href="https://cambriantech.github.io/forge-alloy/verify/#hf.co/continuum-ai/qwen3.5-4b-code-128k-forged/resolve/main/qwen3.5-4b-code-128k-forged.alloy.json@a4da7dea5bb8d3d9">
 <img src="alloy-qr.png" alt="Verify Chain of Custody" width="160"/>
 </a>
 </p>
 
 <p align="center">
-<a href="https://cambriantech.github.io/forge-alloy/verify/#huggingface.co/continuum-ai/qwen3.5-4b-code-128k-forged/resolve/main/qwen3.5-4b-code-128k-forged.alloy.json@a4da7dea5bb8d3d9"><b>Every claim on this card is verified</b></a><br>
+<a href="https://cambriantech.github.io/forge-alloy/verify/#hf.co/continuum-ai/qwen3.5-4b-code-128k-forged/resolve/main/qwen3.5-4b-code-128k-forged.alloy.json@a4da7dea5bb8d3d9"><b>Every claim on this card is verified</b></a><br>
 <b>Trust: self-attested</b> · 3 benchmarks · 1 device tested<br>
 <a href="https://github.com/CambrianTech/forge-alloy">ForgeAlloy</a> chain of custody · <a href="qwen3.5-4b-code-128k-forged.alloy.json">Download alloy</a> · Merkle-chained
 </p>
@@ -137,7 +137,7 @@ Produced via YaRN context extension. Full methodology, ablations, and per-stage
 
 ## Chain of Custody
 
-Scan the QR or [verify online](https://cambriantech.github.io/forge-alloy/verify/#huggingface.co/continuum-ai/qwen3.5-4b-code-128k-forged/resolve/main/qwen3.5-4b-code-128k-forged.alloy.json@a4da7dea5bb8d3d9). Download the [alloy file](qwen3.5-4b-code-128k-forged.alloy.json) to verify independently.
+Scan the QR or [verify online](https://cambriantech.github.io/forge-alloy/verify/#hf.co/continuum-ai/qwen3.5-4b-code-128k-forged/resolve/main/qwen3.5-4b-code-128k-forged.alloy.json@a4da7dea5bb8d3d9). Download the [alloy file](qwen3.5-4b-code-128k-forged.alloy.json) to verify independently.
 
 | What | Proof |
 |------|-------|