Consolidated into #128: README commands, coordinates and taglib discovery #114

Reviewed 2026-09-25 (America/Los_Angeles) against main at bd249f5. Execution order and cross-issue ownership: #169. Batch 05.

This scope replaces the dated implementation prescriptions in the original report and earlier comments; linked historical evidence remains useful but must be rechecked before implementation.

Disposition

Consolidated into #128 to deliver one coherent README change. The remaining work is a subset of that rewrite; no requested work is discarded. #128 now explicitly owns default verify/wrapper instructions, all four artifact coordinates, published-versus-pending version wording, security/cheat-sheet links, optional Central badge, basic/advanced taglib identifiers and EL evaluation guidance.

The benchmark paragraph was already removed by #152, SECURITY.md is already linked, and the deploy command already moved to RELEASING.md in #156. The old instruction to add 1.4.0 coordinates is obsolete and would point users at an affected release.

Site-documentation updates depend on #96's retain/retire decision. #112 remains a separate urgent ESAPI release-policy correction; it need not wait for the rewrite.

Closed as a consolidated duplicate, not as implemented. Track completion and acceptance in #128.