No behavior or code change -- documentation only. Makes explicit what
was previously only implied: self-distributed (not on WordPress.org),
not independently security audited, no CI pipeline yet, tested on
disposable WordPress environments rather than live production sites,
and automatic updates are inactive pending real update infrastructure.
