docs: update README + docs site for public readiness

Refresh the README and documentation for public visitors:

- README: public-facing rewrite with accurate status for all four native
  clients (macOS, Linux, Windows, Android) and the Windows host.
- docs site: fix stale client status (Android is a full client, not a
  scaffold; Windows client is stage-1 complete + signed MSIX), add the
  missing Android client section, correct "which client" guidance.
- Windows host: corrected from "deferred/scoped" to implemented & shipping
  (NVIDIA-only, x64-only) across windows-host, roadmap, status,
  requirements, running-as-a-service, and the README.
- Remove internal infrastructure from public docs (box names, private IPs,
  SSH/token commands, deploy topology); rewrite status.md as a public
  project-status page; sanitize ci.md and implementation-plan.md.
- Update clients/android and clients/apple READMEs to current state.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs-site/content/docs/running-as-a-service.md

@@ -79,6 +79,10 @@ session unit — see [Bazzite](/docs/bazzite).
 
 ## Windows
 
+> punktfunk is Linux-first, but a native **Windows host** also ships — a signed installer with an SCM
+> service and a bundled virtual-display driver. It's **NVIDIA-only** (NVENC) and newer than the Linux
+> host. (Not to be confused with the Windows *client*, which streams *to* a Windows PC.)
+
 On Windows the host runs as a `LocalSystem` service that launches into the interactive session, so it
 captures the secure desktop (UAC / lock screen) and survives reboots with nobody logged in — the same
 model Sunshine/Apollo use.
@@ -98,7 +102,7 @@ way you need an NVIDIA GPU + driver (the host is NVENC-only on Windows).
 After a reboot, from another machine on the network:
 
 ```sh
-punktfunk-probe --discover     # or just look for the host in the Apple app / Moonlight
+punktfunk-probe --discover     # or just look for the host in a native client / Moonlight
 ```
 
 If the host is listed, it's up. If not, check `journalctl --user -u punktfunk-host` on the host.