docs(readme): user-first structure; add website link

Lead with the website (esrun.opentechf.org) under the title. Reorganize into
user-facing sections first — Install, Run JavaScript, TypeScript, Documentation
— then a dedicated Development section for the build/test/lint/benchmark
commands. Drop the internal design-doc link list, the marketing-site dev line,
and the docs-in-sync (D27) note.

Author: Thanga-Ganapathy

README.md

@@ -1,17 +1,19 @@
 # ES-Runtime
+
 V8-based ECMAScript runtime, WinterTC-compliant, I/O-injectable, capability-secured.
 
+**Website & docs → [esrun.opentechf.org](https://esrun.opentechf.org)**
+
 It ships in two shapes from the same core:
 
 - **Embeddable library** (`es-runtime`) — a driven (tick/poll) runtime with
   all I/O injected via provider traits and V8 kept behind an engine abstraction.
 - **Standalone CLI** (`esrun`) — a thin binary that wires the default tokio
   providers and runs JavaScript files end-to-end.
 
-## Quick start (run JavaScript)
+## Install
 
-**Install** the latest release — downloads a prebuilt binary and verifies its
-checksum.
+A prebuilt, checksum-verified binary:
 
 Linux / macOS:
 
@@ -25,64 +27,68 @@ Windows (PowerShell):
 irm https://raw.githubusercontent.com/Open-Tech-Foundation/ES-Runtime/main/install.ps1 | iex
 ```
 
-Or **build once** from source (npm-script-style alias; produces a single
-self-contained binary at `target/release/esrun` — no extra files or asset
-directory needed):
+Or build from source — a single self-contained binary at `target/release/esrun`,
+no extra files or asset directory:
 
 ```sh
-cargo build-cli           # alias for: cargo build --release -p es-runtime-cli
+cargo build --release -p es-runtime-cli   # or the alias: cargo build-cli
 ```
 
-**Then run JS like `node`/`bun`** with the `esrun` binary:
+## Run JavaScript
+
+Run JS files like `node`/`bun`:
 
 ```sh
-./target/release/esrun examples/hello.js
-./target/release/esrun examples/crypto.js
-./target/release/esrun examples/modules/main.mjs   # ES module: import/export + top-level await
-./target/release/esrun -e "console.log(6 * 7)"
-./target/release/esrun --help
+esrun examples/hello.js
+esrun examples/modules/main.mjs   # ES module: import/export + top-level await
+esrun -e "console.log(6 * 7)"
+esrun --help
 ```
 
-To call it simply as `esrun file.js` from anywhere, install it onto your `PATH`:
+(If you built from source, the binary is at `./target/release/esrun`. To call it
+as `esrun` from anywhere, run `cargo install --path crates/runtime-cli`.)
+
+The full implemented WinterTC surface is available (console, URL, fetch, crypto,
+streams, encoding, timers, events); all host capabilities are granted. Inputs run
+as **ES modules**: static `import`/`export`, dynamic `import()`, `import.meta.url`,
+and native top-level `await` all work. Imports resolve as **local files**
+(relative or absolute paths, or `file:` URLs) and **bare specifiers through
+`node_modules`** for ES module packages (run `npm install` yourself — nothing is
+fetched). CommonJS packages and `node:` builtins are rejected with a clear
+message; import attributes and remote modules are not supported yet.
+
+## TypeScript
+
+`esrun` doesn't execute TypeScript, but it ships editor types for the `runtime:*`
+modules:
 
 ```sh
-cargo install --path crates/runtime-cli   # installs `esrun` to ~/.cargo/bin
-esrun examples/timers.js
+esrun types --install   # writes the defs into node_modules/@opentf/esrun and wires tsconfig.json
 ```
 
-The full implemented WinterTC surface is available (console, URL, fetch, crypto,
-streams, encoding, timers, events); all host capabilities are granted. Inputs run
-as **ES modules**: static `import`/`export`, dynamic `import()`,
-`import.meta.url`, and native top-level `await` all work. Imports resolve as
-**local files** (relative or absolute paths, or `file:` URLs) and **bare
-specifiers through `node_modules`** for ES module packages (run `npm install`
-yourself — nothing is fetched). CommonJS packages and `node:` builtins are
-rejected with a clear message; import attributes and remote modules are not
-supported yet.
+`esrun types` alone prints them to stdout. See
+[esrun.opentechf.org/docs/typescript](https://esrun.opentechf.org/docs/typescript).
+
+## Documentation
+
+- **[esrun.opentechf.org](https://esrun.opentechf.org)** — full docs, guides, and
+  cross-runtime benchmarks.
+- **[API reference](docs/API.md)** — globals, scope/non-goals, the `runtime:`
+  modules and their exports (canonical).
+
+## Development
 
-## Common tasks
+Build, test, and benchmark from source:
 
 | Task | Command |
 | --- | --- |
-| Build the `esrun` binary | `cargo build-cli` |
 | Build everything (lib + CLI) | `cargo build-all` |
-| Install `esrun` on `PATH` | `cargo install --path crates/runtime-cli` |
-| Run a JS file | `esrun <file.js>` (or `./target/release/esrun <file.js>`) |
-| Set up editor TypeScript types | `esrun types --install` (writes the `runtime:*` defs into `node_modules/@opentf/esrun` and wires `tsconfig.json`; `esrun types` alone prints them to stdout) |
+| Build just the `esrun` binary | `cargo build-cli` |
 | Run tests | `cargo test --workspace` |
 | Lints + format check | `cargo clippy --workspace --all-targets -- -D warnings` · `cargo fmt --check` |
 | Supply-chain gates | `cargo deny check` · `cargo audit` |
 | Startup/throughput microbenchmark | `cargo run --release -p es-runtime-default-providers --example bench` |
-| Cross-runtime benchmark (vs Node/Bun/Deno) | `bench/run.sh` (see `bench/README.md`) |
-
-## Documentation
-
-- **[API reference](docs/API.md)** — globals, scope/non-goals, the `runtime:` modules and their exports (canonical).
-- **[Architecture](docs/ARCHITECTURE.md)** · **[Spec](docs/SPEC.md)** · **[Decisions](docs/DECISIONS.md)** · **[Security review](docs/SECURITY-REVIEW.md)** · **[Licensing](docs/LICENSING.md)**
-- **Marketing site** (`@opentf/web`, in [`site/`](site/)) — run with `bun install && bun run dev`.
-
-Every public API is documented in both [`docs/API.md`](docs/API.md) and the site
-under `site/app/docs/**`, kept in sync (DECISIONS D27).
+| Cross-runtime benchmark | `bench/run.sh` (see [`bench/README.md`](bench/README.md)) |
 
 ## License