fix: use hf.co (CORS-open) in verify URLs

README.md

@@ -80,13 +80,13 @@ license: apache-2.0
 
 
 <p align="center">
-<a href="https://cambriantech.github.io/forge-alloy/verify/#huggingface.co/continuum-ai/qwen2.5-coder-7b-compacted/resolve/main/v2-7b-coder-compensated.alloy.json@4fe422e9b01fa8f0">
+<a href="https://cambriantech.github.io/forge-alloy/verify/#hf.co/continuum-ai/qwen2.5-coder-7b-compacted/resolve/main/v2-7b-coder-compensated.alloy.json@4fe422e9b01fa8f0">
 <img src="alloy-qr.png" alt="Verify Chain of Custody" width="160"/>
 </a>
 </p>
 
 <p align="center">
-<a href="https://cambriantech.github.io/forge-alloy/verify/#huggingface.co/continuum-ai/qwen2.5-coder-7b-compacted/resolve/main/v2-7b-coder-compensated.alloy.json@4fe422e9b01fa8f0"><b>Every claim on this card is verified</b></a><br>
+<a href="https://cambriantech.github.io/forge-alloy/verify/#hf.co/continuum-ai/qwen2.5-coder-7b-compacted/resolve/main/v2-7b-coder-compensated.alloy.json@4fe422e9b01fa8f0"><b>Every claim on this card is verified</b></a><br>
 <b>Trust: self-attested</b> · 2 benchmarks · 1 device tested<br>
 <a href="https://github.com/CambrianTech/forge-alloy">ForgeAlloy</a> chain of custody · <a href="v2-7b-coder-compensated.alloy.json">Download alloy</a> · Merkle-chained
 </p>
@@ -151,7 +151,7 @@ Produced via head pruning, LoRA fine-tuning, KL-distillation compensation agains
 
 ## Chain of Custody
 
-Scan the QR or [verify online](https://cambriantech.github.io/forge-alloy/verify/#huggingface.co/continuum-ai/qwen2.5-coder-7b-compacted/resolve/main/v2-7b-coder-compensated.alloy.json@4fe422e9b01fa8f0). Download the [alloy file](v2-7b-coder-compensated.alloy.json) to verify independently.
+Scan the QR or [verify online](https://cambriantech.github.io/forge-alloy/verify/#hf.co/continuum-ai/qwen2.5-coder-7b-compacted/resolve/main/v2-7b-coder-compensated.alloy.json@4fe422e9b01fa8f0). Download the [alloy file](v2-7b-coder-compensated.alloy.json) to verify independently.
 
 | What | Proof |
 |------|-------|