[Nico77600]

Summary

• Document the active protection on main and immutable v* tags.
• Document the existing GitHub artifact-attestation workflow for release ZIP assets.
• Record that the already published v2.0.0 tag and ZIP are not replaced or retagged.

Scope

Documentation only. No runtime script, test, package behavior, version, tag, or existing release asset is changed.

Validation

• Existing PowerShell source analysis: passed (0 syntax errors, 0 analyzer errors).
• Existing Windows PowerShell 5.1 test gate: 50 passed, 0 failed.
• Existing package builder: passed, 10 files produced.