Merge feature/rendered-read-view into development

Rendered README + syntax-highlighted blob view: GFM rendering with sanitization, per-line Rouge highlighting, permalinks/line selection, raw endpoint nosniff, clone + copy controls, RSpec coverage, and the reverse-engineered spec.