Publish native review field note

[mauricemohr88-debug]

What changed

• publish an engineering note explaining the native Hermes v0.20 review path and its host-owned admission boundary
• regenerate the README demo with the current v0.2.0 output
• link the note and current demo from the README
• update the security support table from 0.1.x to 0.2.x

Why

The public README still showed a v0.1.4 demo after v0.2.0 shipped. The new field note gives operators a concrete explanation of what the native plugin reviews, what information can reach a configured model provider, and why it is a review aid rather than a universal activation gate.

Validation

• ruff check .
• ruff format --check .
• pytest -q — 162 passed
• git diff --check
• regenerated and visually checked the 1200×675 demo GIF

[mauricemohr88-debug]

Reopening after converting the draft to a reviewable PR so CI receives a supported pull_request event.