README: add dedupe note (distinct from onnx library path-traversal CVEs) + CVSS

Package model files in poc.zip (avoid platform auto-parse of top-level .onnx)

onnx-tensorrt external_data offset OOB read PoC (CWE-125)

initial commit