feat(zk): document production trusted setup ceremony path

## Context
Test pot14 keys are not mainnet safe

## Scope
- ceremony runbook in internal/cougr-core-circuits
- with_verification_key production guide

## Acceptance
- docs reviewed for mainnet deployers