Put the download where someone looking for it will look

The APK has been in releases/ all along, but nothing on the front page said so,
and the first thing most people want from an app's repository is the app.

A Download section above the fold: the current build as a relative link that
works on any forge, the raw URL spelled out for anywhere the relative one does
not resolve, the checksum to verify it, and a pointer to releases/ for every
earlier version.

It also says plainly that Android will call the developer unknown and ask to
install anyway. That warning is what Android says about every app installed
outside a store, and read cold it looks like the app is unsafe rather than
merely unlisted — better to say so first than to let someone find out and
assume the worst.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

README.md

@@ -15,6 +15,32 @@ and Arabic script, online or fully offline.
 
 Jetpack Compose, Material 3, `minSdk 24`. No account, no tracking, no server of its own.
 
+## Download
+
+**[ganjoor-0.4.0.apk](releases/ganjoor-0.4.0.apk)** — 31.7 MB, `minSdk 24` (Android 7.0 and up).
+
+Direct link, if you are reading this somewhere the one above does not resolve:
+
+```
+https://github.com/anas-rashid/ganjoorandroid/raw/main/releases/ganjoor-0.4.0.apk
+```
+
+Every version ever released is kept in [`releases/`](releases/) with its checksum, and all of
+them are signed with the same key, so any one upgrades any other in place without losing your
+bookmarks. Check what you downloaded:
+
+```sh
+sha256sum ganjoor-0.4.0.apk
+# 1c64cefa0fb2b51bf73386460ec1b88bda3e20832fa6926c2f7f1fb863ab9fc7
+```
+
+Android will warn that the developer is unknown and ask you to install anyway. That is what it
+says about **any** app installed outside a store; this one is signed with its own certificate
+rather than distributed through Play. Allow installs from your browser once, and it will go
+through.
+
+To build it yourself instead, see [Build](#build).
+
 ## Reading
 
 Poems are set as couplets: the two hemistichs of each line stack on a phone, the first aligned