security: re-moderate model text, identity-bound rite token, XFF/queue-freeze hardening, OOM guard; README truth fixes

GODSEED v0