docs: growth-audit critical fixes (SECURITY 1.x, badges, pronunciation)

README.es.md

@@ -8,9 +8,12 @@
 
 [![CI](https://github.com/DataDave-Dev/becwright/actions/workflows/ci.yml/badge.svg)](https://github.com/DataDave-Dev/becwright/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/becwright?logo=npm)](https://www.npmjs.com/package/becwright)
+[![npm downloads](https://img.shields.io/npm/dm/becwright?logo=npm&label=descargas)](https://www.npmjs.com/package/becwright)
 [![PyPI](https://img.shields.io/pypi/v/becwright?logo=pypi&logoColor=white)](https://pypi.org/project/becwright/)
+[![Versiones de Python](https://img.shields.io/pypi/pyversions/becwright?logo=python&logoColor=white)](https://pypi.org/project/becwright/)
+[![Licencia: MIT](https://img.shields.io/badge/licencia-MIT-green)](LICENSE)
 
-**La capa de enforcement para agentes de IA.**
+**La capa de enforcement para agentes de IA.** <sub>(se pronuncia *bec-ráit* — un "wright" es un artesano, como en *playwright*)</sub>
 
 Reglas que se ejecutan, no notas que se ignoran. Tu `CLAUDE.md` es un *cartel*;
 becwright es el *guardia* — corre tus reglas sobre el código y frena el commit
@@ -29,7 +32,7 @@ Se publica.
 Con becwright, el commit no llega a existir:
 
 <p align="center">
-  <img src="assets/becwright-demo.svg" alt="becwright frenando un commit que hardcodea un secreto y usa eval" width="640">
+  <img src="assets/becwright-demo-animated.svg" alt="becwright frenando un commit en vivo: corre git commit, dos reglas blocking se disparan con su porqué, el commit se detiene" width="640">
 </p>
 
 > **Velo vos mismo en 5 segundos** — sin configurar nada, sin git, sin tocar tu

README.md

@@ -8,9 +8,12 @@
 
 [![CI](https://github.com/DataDave-Dev/becwright/actions/workflows/ci.yml/badge.svg)](https://github.com/DataDave-Dev/becwright/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/becwright?logo=npm)](https://www.npmjs.com/package/becwright)
+[![npm downloads](https://img.shields.io/npm/dm/becwright?logo=npm&label=downloads)](https://www.npmjs.com/package/becwright)
 [![PyPI](https://img.shields.io/pypi/v/becwright?logo=pypi&logoColor=white)](https://pypi.org/project/becwright/)
+[![Python versions](https://img.shields.io/pypi/pyversions/becwright?logo=python&logoColor=white)](https://pypi.org/project/becwright/)
+[![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 
-**The enforcement layer for AI coding agents.**
+**The enforcement layer for AI coding agents.** <sub>(*bec-wright* — a "wright" is a maker, as in *playwright*)</sub>
 
 Rules that run, not notes that get ignored. Your `CLAUDE.md` is a *sign*;
 becwright is the *guard* — it runs your rules against the code and blocks the
@@ -28,7 +31,7 @@ string — and leaves a note to *"clean this up later."* Nobody does. It ships.
 With becwright, the commit never happens:
 
 <p align="center">
-  <img src="assets/becwright-demo.svg" alt="becwright blocking a commit that hardcodes a secret and calls eval" width="640">
+  <img src="assets/becwright-demo-animated.svg" alt="becwright blocking a commit live: git commit runs, two blocking rules fire with their why, the commit is stopped" width="640">
 </p>
 
 > **See it yourself in 5 seconds** — no setup, no git, nothing on your machine is

SECURITY.md

@@ -2,13 +2,13 @@
 
 ## Supported versions
 
-becwright is pre-1.0 and ships fixes on the latest release only. Please make
-sure you are on the most recent version before reporting.
+becwright ships fixes on the latest release only. Please make sure you are on
+the most recent version before reporting.
 
 | Version | Supported |
 | ------- | --------- |
-| latest `0.x` | ✅ |
-| older `0.x` | ❌ |
+| latest `1.x` | ✅ |
+| older releases | ❌ |
 
 ## Reporting a vulnerability