docs: show release download count

[Desperado]

What

Add a live cumulative GitHub release-download badge to the qmax-code README.

Acceptance criteria

• The README displays downloads across all qmax-code release assets and releases.
• The badge links to the qmax-code releases page.

Validation

• go build -o /tmp/qmax-code-download-badge-check . — passed.
• go vet ./... — passed.
• go test ./... — all packages passed.
• git diff --check — passed.
• Shields endpoint — HTTP 200 SVG; currently reports 44 downloads.
• Independent adversarial review — no findings.

Deployment verification

README-only change. After merge, verify the badge renders on the repository homepage and links to the releases page.

Known unrelated/non-blocking failures

• golangci-lint is not installed in the local environment; the repository CI lint job is authoritative.
• pre-commit run --all-files is not applicable because this repository has no .pre-commit-config.yaml.

[sigilix]

---

_{Skipped · 168c74e · 0 findings — View review
Sigilix · 0 of 50 reviews used in past 5h}

Sigilix is reviewing this pull request.

A structured overview will replace this note when retrieval and specialist review complete.

== accretion vow ==
  .            .        .----====~~~~====----.             .
       *            .-~~  .   .       *       ~~-.      *
                 .-~     .-----.   .-----.       ~-.
      .        .~      .~   .   ~.~   *   ~.        ~.
              /      .~       .-===-.       ~.        \
    *        ;      /       ./  .*.  \.       \        ;       *
             |     |      .-|  (   )  |-.      |       |
        .    |     |        \.  '-'  ./        |       |   .
             ;      \         '-===-'         /        ;
              \      ~.    gravity keeps    .~        /
       *       ~.      ~.   every promise  .~       .~      .
                 ~-.     '----.     .----'      .-~
     .              '---...___ ~~~~ ___...---'          *
          .                       '                     .

what gathers here is not hurried
care has gravity enough to stay

[qualitymaxapp]

QualityMax Review — canonical overview updated; inline findings are attached to this review.

[qualitymaxapp]

QualityMax Review

Verdict: COMMENT · Confidence: unavailable — no completed model review

Files eligible: 1 · Files reviewed: 1 · Files with findings: 0 · Findings: 0 · Inline cards: 0

Priority findings

priority	location	finding
—	—	No blocking findings

Review gates

gate	status
AI diff review	skipped · eligible 0, reviewed 0 · LLM · All changed files were excluded as non-code, generated, or binary content.
SAST	completed · eligible 1, reviewed 1 · hybrid
Overall review evidence	unavailable — insufficient model review evidence
Inline evidence	not needed

Important files

file	risk	note	next step
—	—	No findings	—

Review lifecycle

Use the inline cards to inspect evidence and suggested remediation. Re-run the QualityMax review after pushing a fix; unchanged cards are identified by their stable finding marker. Dismiss with a reason through the existing QualityMax/GitHub review feedback flow. 0 prior card(s) are stale/resolved on this head. @qmax Q&A is tracked separately.

Proof legend: VERIFIED independently judged patch · REPRODUCED verified finding · GROUNDED deterministic evidence · MODEL-ONLY model judgment.

QualityMax project results are available in the configured project.

_{Receipt · commit 168c74e77794123c43ba6e004eca7f60db6093c2 · run 2026-08-24T14:49:05+00:00 · model served not applicable · model requested not applicable · model review unavailable — no completed model review · model source not recorded · re-review 1 · proof counts {}}

[qualitymaxapp]

⚠️ QualityMax Pipeline

Gate	Result
🔍 AI diff review	⏭️ Skipped — All changed files were excluded as non-code, generated, or binary content. · skipped · 0 eligible / 0 reviewed · All changed files were excluded as non-code, generated, or binary content.
🔍 SAST	completed · 1 eligible / 1 reviewed
🔍 Canonical PR review delivery	completed · 0 eligible / 0 reviewed · exact-head review #5009162460 and overview #5396933538 confirmed
🧪 Repo Tests	✅ 644/644 passed (go)
🤖 AI Tests	⚠️ 51/56 passed

_{Powered by QualityMax — AI-Powered Test Automation}

[Desperado]

Merge evidence: this is a README-only badge change. Local go build, go test ./..., and go vet ./... passed; GitHub build-and-test and Run Go Tests passed; QualityMax reported SAST complete with 0 findings and repository tests 644/644 passed. Its ACTION_REQUIRED conclusion is limited to the separately generated AI Tests batch (51/56), not the repository suite, and no required-status-check rule is configured on main.