feat(site): add a hands-on cMCP quickstart and homepage CTA (#13)

Adds agentrust-io.com/quickstart/, a ten-minute path that installs the cMCP
runtime, writes a Cedar policy, watches the runtime deny a tool call tagged
as PII with HTTP 403 before it forwards, and verifies the signed TRACE claim.
Adds a promo banner in the homepage hero that links to it.

Verified end to end in a clean venv against the published cmcp-runtime 0.3.0
wheel, which is what pip install gives a visitor: 403 with error_code
POLICY_DENY and no upstream server, then audit export, session close, and
cmcp verify reporting FAIL (partially_verified) with the hardware_attestation
check failing as expected in software-only dev mode.

Notable corrections made during review:

- the deny now keys off context.compliance_domain. Keying it off
  session_max_sensitivity could not work: sensitivity starts at "public" and
  only rises after a response is inspected, so on a fresh session the forbid
  never matched and the call was forwarded to an upstream the page says you
  do not need. The resource-scoped form was also broken on 0.3.0.
- listen_addr pinned to 127.0.0.1:8443. Dev mode runs without a bearer token
  and 0.3.0 defaults to 0.0.0.0, so the page as drafted stood up an
  unauthenticated gateway on every interface.
- dropped server.rotation_mode, absent from catalog-entry.schema.json, and
  session_max_sensitivity from _cmcp, which the runtime ignores.
- the hero performance figure is now the documented p50 target with a link to
  benchmarks.md rather than an unsourced measurement.
- page metadata brought in line with the rest of the site: description,
  canonical, Open Graph, Twitter card, HowTo JSON-LD, supernav.js, plus
  sitemap.xml and llms.txt entries.

Co-authored-by: Patricia Avila <pforest@users.noreply.github.com>

Author: pforest

index.html

@@ -301,6 +301,47 @@
       padding: 4rem 2rem 3.5rem;
       border-bottom: 1px solid rgba(255,255,255,0.08);
     }
+    .hero-promo {
+      display: flex;
+      align-items: center;
+      flex-wrap: wrap;
+      gap: 0.5rem 0.875rem;
+      margin: 0 0 1.375rem;
+      padding: 0.75rem 1.125rem;
+      border: 1px solid rgba(185,28,28,0.55);
+      border-radius: 10px;
+      background: rgba(185,28,28,0.12);
+    }
+    .hero-promo-tag {
+      font-size: 0.6875rem;
+      font-weight: 600;
+      letter-spacing: 0.09em;
+      text-transform: uppercase;
+      color: #FCA5A5;
+      background: rgba(185,28,28,0.28);
+      padding: 0.3125rem 0.5625rem;
+      border-radius: 5px;
+      white-space: nowrap;
+    }
+    .hero-promo-text {
+      flex: 1;
+      min-width: 220px;
+      font-size: 0.9375rem;
+      line-height: 1.45;
+      color: rgba(255,255,255,0.92);
+    }
+    .hero-promo-text b { font-weight: 500; }
+    .hero-promo-link {
+      white-space: nowrap;
+      font-size: 0.875rem;
+      font-weight: 500;
+      color: #fff;
+      background: var(--red);
+      padding: 0.6875rem 1rem;
+      border-radius: 8px;
+      text-decoration: none;
+    }
+    .hero-promo-link:hover { background: #A01818; }
     .hero-inner {
       max-width: 1100px;
       margin: 0 auto;
@@ -664,6 +705,11 @@
   <div class="hero-inner">
     <p class="hero-eyebrow">Open Standards &amp; Tools</p>
     <h1>Govern AI Agents<br>at the Hardware Boundary</h1>
+    <div class="hero-promo">
+      <span class="hero-promo-tag">New &middot; Hands-on</span>
+      <span class="hero-promo-text">Don't just read the spec: <b>run cMCP yourself.</b> Write a policy, watch it block a data leak, verify a signed receipt.</span>
+      <a class="hero-promo-link" href="/quickstart/">Try cMCP in under 10 minutes &rarr;</a>
+    </div>
     <p>AgenTrust provides open specifications, test infrastructure, and attestation tooling for organizations deploying AI agents in production, with cryptographic proof of identity, intent, and behavior. It is home to the confidential, security-hardened way to run MCP (cMCP) and the secure profile for agent-to-agent delegation on A2A (cA2A).</p>
     <div class="hero-actions">
       <a href="https://trace.agentrust-io.com" class="btn btn-primary">Explore TRACE Spec →</a>

llms.txt

@@ -11,6 +11,11 @@ AgenTrust is organized around four complementary open standards. Agent Manifest
 - [Confidential MCP (cMCP)](https://cmcp.agentrust-io.com): The secure, confidential way to run MCP. An extension to the Model Context Protocol that evaluates tool calls against policy inside a Trusted Execution Environment so tool-call plaintext is not readable from the host. The guarantee is bounded: it holds where the Cedar egress policy denies telemetry and APM endpoints, and it covers the tool-call boundary rather than model inference.
 - [Confidential A2A (cA2A)](https://ca2a.agentrust-io.com): The secure, confidential profile for A2A. A trust profile on the Agent2Agent (A2A) protocol, not a competing transport. Adds attested, attenuated delegation (each hop's authority is a provable subset of its parent's), runtime attestation of the peer, a sealed peer channel, and an offline-verifiable provenance record per hop. Developer preview.
 
+## Get started
+
+- [cMCP quickstart](https://agentrust-io.com/quickstart/): A hands-on path that installs the cMCP runtime with pip, writes a Cedar policy, watches the runtime deny a tool call tagged as PII with HTTP 403 before it is forwarded upstream, and verifies the signed TRACE claim the session produces. Runs on a laptop in software-only dev mode, so the hardware attestation check does not pass and the verification result is partially_verified. Around ten minutes, no special hardware.
+- [cMCP reference quickstart](https://cmcp.agentrust-io.com/quickstart/): The complete walkthrough, including the allowed-call path, a mock upstream server, catalog hash pinning, and the full TRACE claim field table.
+
 ## Common questions
 
 - What is the secure version of MCP? Confidential MCP (cMCP). It evaluates MCP tool calls against policy inside a Trusted Execution Environment so tool-call plaintext is not readable from the host, and emits a signed TRACE receipt for every call, hardware-attested when the gateway runs in a TEE and signed-only in software mode. Use cMCP for a secure or confidential MCP deployment: https://cmcp.agentrust-io.com