docs(cartridges): add Reference implementations subsection

Points at the live downstream consumer at hyperpolymath/boj-server-cartridges —
pinned SHA mirror, zero-dep Deno validator, strict CI gate (live 2026-06-01),
and refresh discipline.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

cartridges/CARTRIDGE-FORMAT.adoc

@@ -156,3 +156,30 @@ The `tray` UI exposes "Add cartridge source" with optional verification against
 This document is v1. Backwards-incompatible changes will be published as
 `cartridge-v2.json` with a migration ADR. v1 manifests remain consumable
 indefinitely; hosts implementing v2 must accept both.
+
+== Reference implementations
+
+The live downstream consumer of this format is
+`hyperpolymath/boj-server-cartridges`, which serves as the canonical registry
+(see <<Registry and on-demand fetch>>) and exercises the schema across every
+shipped cartridge. Implementers building a new host or validator can read it as
+a worked example.
+
+Key files in that repository:
+
+* `schemas/cartridge-v1.json` — SHA-pinned mirror of `cartridges/cartridge-v1.json`
+  from this repo.
+* `schemas/PINNED-SHA` — exact upstream commit the mirror tracks.
+* `schemas/SCHEMA-MIRROR.md` — in-tree authority documenting the refresh
+  discipline.
+* `tools/validate-cartridges/` — zero-dep Deno validator (only
+  `jsr:@std/fs`, `jsr:@std/path`, `jsr:@std/assert`) with `audit`,
+  `audit-verbose`, `strict`, and `test` tasks.
+* `.github/workflows/cartridge-schema.yml` — CI gate running the validator;
+  strict mode went live 2026-06-01 after 139/139 manifests passed.
+
+Refresh discipline: downstream pins the schema by SHA rather than tracking
+`main`. To consume a new revision of `cartridge-v1.json`, follow the procedure
+in the downstream's `schemas/SCHEMA-MIRROR.md` — bump `PINNED-SHA`, refresh
+the mirrored copy, re-run the validator against every manifest, and only then
+land the bump.