docs: record Zenodo DOI

CITATION.cff

@@ -7,6 +7,7 @@ authors:
     given-names: "M"
 version: "2.1.0-alpha.1"
 date-released: 2026-11-06
+doi: "10.5281/zenodo.24012765"
 abstract: >-
   An experimental static security analyser for evidence-gated analysis of
   repositories and Git pushes, including pattern rules, syntax overlays, code

README.md

@@ -1,6 +1,6 @@
 # OpenUltraSAST
 
-[![Zenodo](https://img.shields.io/badge/Zenodo-OpenUltraSAST-1682D4?logo=zenodo)](https://zenodo.org/account/settings/github/repository/norandom/OpenUltraSAST)
+[![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.24012764.svg)](https://doi.org/10.5281/zenodo.24012764)
 
 OpenUltraSAST is an experimental static security analyser. It aims to check security on
 repositories it has never seen. It scans a checkout or the commits a `git push` would publish. It