OpenSSF Scorecard README: Security Signals as a Reproducible Tool

MDRSS preserves stored versions. External sources are never silently refreshed.