www: strip private www.foxhop.net/ecdsa.html links; promote v3 in index

foxhop CLAUDE.md update: www.foxhop.net is private (book.foxhop.net
source + research artifacts). URLs like https://www.foxhop.net/ecdsa.html
do not exist & must not appear in public posts or external links.
Public-facing copy of ECDSA work belongs on foxhop.net wiki (remarkbox
RST pages), not as static HTML under www.foxhop.net/.

Stripped two external links:

  bend.html  — "secp256k1 point-addition challenge work at
               foxhop.net/ecdsa" → "(research artifact, internal repo)"
  index.html — same pattern → "internal ECDSA research"

Also brought index.html catalog highlight in sync with Day-3:
  was: secp256k1 batched point-mul (6.5 Gkeys/s on a 4090, surveyed)
  now: 13.6 Mkeys/s on a 3090, ~309x coincurve CPU

The 4090 projection moves out of the lead because we now have a
measured number on our actual hardware.

www/bend.html

@@ -78,7 +78,7 @@ make gpu-worker LUMBDA=asm                # smallest footprint</code></pre>
 
 <section id="ecdsa">
 <h2>Real workload &mdash; ecdsafail search</h2>
-<p>Beyond hash fan-out, bend now dispatches quantum-reversible circuit scoring for our secp256k1 point-addition challenge work at <a href="https://www.foxhop.net/ecdsa.html">foxhop.net/ecdsa</a>. Lumbda emits an upstream-format <code>ops.bin</code> from a Phase B Roetteler 12-step circuit, calls <code>(bend!-call '(cuda-sim-ops-bin path 141))</code>, &amp; receives Σ Clifford / Σ Toffoli totals back from a GPU worker over our binary wire &mdash; same cross-tier validation, same byte-identical portal contract the hash demo proves. Search loops on any host tier ship candidate scoring to whichever fleet node holds a warm CUDA context.</p>
+<p>Beyond hash fan-out, bend now dispatches quantum-reversible circuit scoring for a secp256k1 point-addition challenge attack (research artifact, internal repo). Lumbda emits an upstream-format <code>ops.bin</code> from a Phase B Roetteler 12-step circuit, calls <code>(bend!-call '(cuda-sim-ops-bin path 141))</code>, &amp; receives Σ Clifford / Σ Toffoli totals back from a GPU worker over our binary wire &mdash; same cross-tier validation, same byte-identical portal contract the hash demo proves. Search loops on any host tier ship candidate scoring to whichever fleet node holds a warm CUDA context.</p>
 <p>Measured on a 3090 against HEAD's 12.8 M-op kickmix <code>ops.bin</code> (716 MB):</p>
 <table>
   <thead><tr><th>n_batches</th><th>shots</th><th>wire-s</th><th>cpu-ms</th><th>gpu-ms</th><th>gpu/cpu</th></tr></thead>

www/index.html

@@ -64,7 +64,7 @@ make test-all</code></pre>
 <p>Wrap any registered GPU-able form in <code>(bend …)</code> and lumbda decides per call whether to run it locally or ship it to a CUDA worker over our wire protocol. Tiny inputs stay local; heavy inputs bend to a worker that holds a warm CUDA context across requests.</p>
 <pre><code>(bend (cuda-shake-fanout one-million-inputs 32))   ; → 157 ms on a 3090
                                                    ;   12× faster than host hashlib</code></pre>
-<p>Real workloads from the catalog: SHAKE256 fan-out (12&times; over host hashlib at 1 M inputs), secp256k1 batched point-mul (6.5 Gkeys/s on a 4090, surveyed), tableau stabilizer sim (186&times; over Stim CPU, surveyed), and a quantum-reversible circuit simulator wired live to our ECDSA work at <a href="https://www.foxhop.net/ecdsa.html">foxhop.net/ecdsa</a>.</p>
+<p>Real workloads from the catalog: SHAKE256 fan-out (12&times; over host hashlib at 1 M inputs), secp256k1 batched point-mul (13.6 Mkeys/s on a 3090, ~309&times; coincurve CPU), tableau stabilizer sim (186&times; over Stim CPU, surveyed), and a quantum-reversible circuit simulator wired live to internal ECDSA research.</p>
 <p><a class="cta" href="bend.html">Read the full bend page &mdash; protocol, benchmarks, form catalog</a></p>
 </section>