Release HTMLTrust paper with final v0.3 evidence

[jt55401]

Summary

• define malformed-comment rejection behavior in the canonicalization profile
• add a pinned Docker paper build and reproducible arXiv source package
• archive the exact Study 1 v0.3 source and evidence snapshot
• revise empirical, security, interoperability, and prior-work claims against the final 4,846-region run
• retain the first PaperReview.ai review as a token-free research artifact

Validation

• make check
• make ietf
• make w3c-check
• make paper-arxiv-docker
• clean-source arXiv archive compile with Docker pdflatex
• all 10 rendered PDF pages inspected; final render is byte-identical after bibliography cleanup
• git diff --check

The supplementary archive records the exact Study 1 commit, corpus hash, container image ID, run manifests, and compact result reports.