Add full README covering purpose, the four privacy vulnerabilities detected (address reuse, dust spend, UTXO consolidation, CIOH), usage instructions, project structure, and a privacy notice.