docs: rewrite for users — drop internal infra context

README + supporting docs were written for ourselves (deployment paths,
internal product comparisons, internal task lists, build pipeline
artifacts) instead of for users of the software. This pass refocuses
them on what the software is, how to install, configure, and use it.

- README.md: full rewrite. New shape — What it does / Architecture /
  Build / Run / Configuration / MCP tools / Security model / Status /
  License / Dependencies. Drops the internal "why we built it"
  narrative, drops phase-status claims that drifted stale, drops
  internal deployment paths.
- ROADMAP.md: deleted. Was an internal task-list with [x]/[ ] items
  showing incremental private development. The README's Status
  section now communicates what's actually shipped.
- docs/architecture.md: scrub cross-project comparisons referencing
  unrelated internal Sulkta codebases.
- aiken-escrow/README.md: drop reference to a non-existent spec file;
  rewrite the Status checklist to reflect what's actually done
  rather than what was open at the time of writing.
- aiken-escrow/README.md: scrub internal image names +
  container paths; the audit findings (chain hashes, validator hash,
  what each tx proved) are the public-useful part and stay.
- aiken-escrow/README.md: drop references to
  feature-flag-gated branches that no longer exist.
- Dockerfile: drop the dead `escrow_wip surface` phrase from comments.
- Cargo.toml: drop the cross-project comparison comment that named
  an unrelated internal service.
- crates/aldabra-{core,dao}: scrub internal preprod-test naming from
  source comments — same technical content, generic phrasing.

crates/aldabra-core/src/plutus_mint.rs

@@ -193,12 +193,9 @@ fn hash_to_hex_32(h: &[u8; 32]) -> String {
 
 // Generous overhead for the vkey witness + redeemer ex_units inflation +
 // CBOR length-prefix flips between unsigned (def-length) and signed
-// (indef-length) array tags. Original 128 underbid by 144 bytes on a
-// 3-input + inline-V2-policy mint (preprod_test2 governor bootstrap
-// 2026-05-08, FeeTooSmallUTxO @ 6353 lovelace short). Bumping to 256
-// got within 16 bytes on retry — still rejected. 512 is generous head-
-// room for any single-vkey case (~+22k lovelace overestimate worst-case,
-// trivial); reconsider for multi-sig where many vkey witnesses are added.
+// (indef-length) array tags. 512 is generous head-room for any single-
+// vkey case (~+22k lovelace overestimate worst-case, trivial); reconsider
+// for multi-sig where many vkey witnesses are added.
 const WITNESS_OVERHEAD_BYTES: u64 = 512;
 
 /// Build + sign a Plutus-policy mint with a fully-specified output.

crates/aldabra-dao/src/builder/proposal_create.rs

@@ -596,8 +596,8 @@ pub fn build_unsigned_proposal_create(
     // knows to require + emit the corresponding witness.
     // Range width must be ≤ governor.create_proposal_time_range_max_width
     // (in ms; slot length on every Shelley+ network is 1 second). For
-    // Sulkta-shape governors with 30min windows, the legacy 1799-slot
-    // const fits. For tiny test DAOs (preprod_test: 30s) it must shrink
+    // typical 30min governor windows the legacy 1799-slot const fits.
+    // For governors configured with tighter test windows it must shrink
     // to the per-DAO budget. Subtract 1 slot for safety against round-up.
     let max_width_slots = ((args.governor.datum.create_proposal_time_range_max_width / 1_000)
         as u64)