Canonicalize SDA a11oy domain references

W2: SZL Estate cross-link footer + honest status label

docs(README): fix dead holographic link + add receipt-cluster cross-links

README: estate cross-link alignment + clarity (Wave 1, T003)

Visual polish: additive CSS/motion/a11y/meta only; all visible copy frozen (text-diff verified). No JS/server.py/Dockerfile/.github/.compliance changes.

fix: allow huggingface.co to frame the Space (App-tab embed was blocked by frame-ancestors 'self')

harden(sda): add CSP/HSTS/nosniff/Referrer + clean Server banner via server.py; same files/port (non-breaking)

Declare license: apache-2.0 (matches source repo khipu-sda-core) for org HF license-consistency guard

fix(sunset-domain): repoint a11oy.net -> a-11-oy.com in SDA fabric + verify widget

docs: add Ouroboros Thesis concept DOI 10.5281/zenodo.19944926

sda: add missing vendored three.module.min.js + fix dead killinchu host

fix: re-home static Space as Docker (static hosting 404s org-wide); serve same files via python http.server on 7860

fix(meta): short_description<=60

fix(meta): HF-valid colorFrom + short_description<=60

SZL SDA static surface — sovereign domain-superiority COP (khipu-sda-core)