docs(readme): fix broken links and code block formatting in readme

README.md

@@ -2,7 +2,7 @@
 
 A local Data Loss Prevention (DLP) proxy that sits between `claude-code` and the
 Anthropic API. It scans outgoing requests for secrets with
-[GitGuardian's `ggshield`](https://github.com/GitGuardian/ggshield), swaps each
+[GitGuardian's `ggshield](%5Bhttps://github.com/GitGuardian/ggshield%5D(https://github.com/GitGuardian/ggshield))`, swaps each
 secret for an opaque placeholder token before it leaves your machine, then
 restores the real secret in the streamed response on the fly — so Claude never
 sees your secrets but tooling that echoes a placeholder still gets the real
@@ -20,8 +20,7 @@ claude-code ◄──SSE (detokenized)─── proxy ◄──SSE stream──
 1. **Request interception** — the JSON body of `POST /v1/messages` is scanned by
    `ggshield`. Every detected secret is encrypted with **AES-256-GCM** under a
    persistent master key and replaced with a self-contained
-   `<<<gg_token_[hex]>>>` placeholder, where the hex payload is `IV ++ authTag ++
+   `<<<gg_token_[hex]>>>` placeholder, where the hex payload is `IV ++ authTag ++ ciphertext`. No server-side mapping is kept — the token carries everything
-   ciphertext`. No server-side mapping is kept — the token carries everything
    needed to restore it (`src/tokenize.ts`, `src/store.ts`). The redacted body is
    forwarded upstream.
 2. **Streaming detokenization** — the response is piped through a stateful
@@ -43,10 +42,10 @@ unrecoverable.
 
 ## Requirements
 
-- **Node.js ≥ 23.6** (the proxy runs TypeScript directly via Node's built-in
+* **Node.js ≥ 23.6** (the proxy runs TypeScript directly via Node's built-in
   type stripping — no build step, no `ts-node`/`tsx`). On Node 22.6–23.5 run
   with `node --experimental-strip-types src/index.ts`.
-- **`ggshield`** on your `PATH` and authenticated (`ggshield auth login`). If
+* **`ggshield`** on your `PATH` and authenticated (`ggshield auth login`). If
   `ggshield` is missing or errors, the proxy logs a warning and forwards traffic
   **unredacted** (fail-open) — it never blocks your requests.
 
@@ -76,9 +75,9 @@ That's the only change `claude-code` needs — it keeps using your normal
 
 ## Configuration
 
-| Env var                 | Default            | Purpose                          |
+| Env var                   | Default             | Purpose                         |
-| ----------------------- | ------------------ | -------------------------------- |
+| ------------------------- | ------------------- | ------------------------------- |
-| `PORT`                  | `8080`             | Port the proxy listens on        |
+| `PORT`                    | `8080`              | Port the proxy listens on       |
 | `ANTHROPIC_UPSTREAM_HOST` | `api.anthropic.com` | Upstream API host to forward to |
 
 ## Tell Claude to leave the tokens alone
@@ -128,50 +127,47 @@ sudo loginctl enable-linger "$USER"
 
 ## Permanently point claude-code at the proxy
 
-Setting `ANTHROPIC_BASE_URL` per shell (as in [Setup](#setup)) only lasts for
+Setting `ANTHROPIC_BASE_URL` per shell (as in [Setup](%23setup)) only lasts for
 that session. To make it stick:
 
-- **fish** — set a universal variable once; it persists across sessions:
+* **fish** — set a universal variable once; it persists across sessions:
+  
+```fish
+set -Ux ANTHROPIC_BASE_URL http://localhost:8080
+```
 
-  ```fish
+* **bash/zsh** — add the export to your shell rc (or `~/.profile` for all shells):
-  set -Ux ANTHROPIC_BASE_URL http://localhost:8080
-  ```
 
-- **bash/zsh** — add the export to your shell rc (or `~/.profile` for all
+```bash
-  shells):
+echo 'export ANTHROPIC_BASE_URL=http://localhost:8080' >> ~/.bashrc
+```
 
-  ```bash
+* **All processes in a graphical session** (works regardless of shell) — drop
-  echo 'export ANTHROPIC_BASE_URL=http://localhost:8080' >> ~/.bashrc
-  ```
-
-- **All processes in a graphical session** (works regardless of shell) — drop
   it in systemd's user environment:
-
+  
   ```bash
   mkdir -p ~/.config/environment.d
   echo 'ANTHROPIC_BASE_URL=http://localhost:8080' >> ~/.config/environment.d/claude.conf
   ```
 
-  Takes effect on next login.
+```
+
+Takes effect on next login.
 
 ## Scripts
 
-| Command           | What it does                                          |
+| Command             | What it does                                  |
-| ----------------- | ----------------------------------------------------- |
+| ------------------- | --------------------------------------------- |
-| `npm start`       | Run the proxy                                         |
+| `npm start`         | Run the proxy                                 |
-| `npm run dev`     | Run with `--watch` (restarts on file changes)         |
+| `npm run dev`       | Run with `--watch` (restarts on file changes) |
-| `npm test`        | Run the detokenizer state-machine self-check          |
+| `npm test`          | Run the detokenizer state-machine self-check  |
-| `npm run typecheck` | Type-check the source with `tsc --noEmit`           |
+| `npm run typecheck` | Type-check the source with `tsc --noEmit`     |
 
 ## Limitations
 
-- Detection is only as good as `ggshield`. It catches known secret patterns and
+* Detection is only as good as `ggshield`. It catches known secret patterns and
   generic high-entropy strings, not arbitrary sensitive prose.
-- Re-inserted secrets are assumed to be escape-neutral (typical API
+* Tokens are decryptable by anyone holding the master key file. Multiple proxy
-  keys/tokens). A secret literally containing a backslash or double-quote could
-  mis-escape inside the response JSON. See the `ponytail:` note in
-  `src/detokenize.ts`.
-- Tokens are decryptable by anyone holding the master key file. Multiple proxy
   instances must share the same `master.key` to resolve each other's tokens.
 
 ## License