docs: sync documentation with v1.1.0 protocol and CLI changes

README.md

@@ -130,6 +130,14 @@ goget --rate-limit 1MB/s --url https://example.com/file.zip
 # Proxy
 goget --proxy http://proxy.example.com:8080 --url https://example.com/file.zip
 goget --proxy socks5h://127.0.0.1:1080 --url https://example.com/file.zip
+
+# Pin server certificate (applies to HTTPS, FTPS, Gemini, WebDAVS)
+goget --pinned-cert a1b2c3d4e5f6... --url https://example.com/file
+goget --pinned-cert a1b2c3d4e5f6... --url gemini://gemini.example.com/
+
+# Pin SSH host key for SFTP (OpenSSH fingerprint from `ssh-keygen -lf`)
+goget --pinned-host-key "SHA256:AAAAC3NzaC1lZDI1NTE5AAAAIE..." \
+      --url sftp://example.com/file
 ```
 
 ### Recursive & Mirroring
@@ -178,6 +186,10 @@ goget --on-complete "process.sh" --url https://example.com/data.csv
 # JSON progress for scripting
 goget --json --no-progress --url https://example.com/file.zip
 
+# Inspect a partially-downloaded transfer's resume metadata
+goget --show-metadata ./file.zip
+goget --show-metadata ./file.zip.goget.meta --json
+
 # Shell completion
 goget --completion bash > /etc/bash_completion.d/goget
 goget --completion zsh > /usr/share/zsh/site-functions/_goget
@@ -293,6 +305,8 @@ just uninstall-man# remove installed manpage
 - [`docs/download-pipeline.md`](docs/download-pipeline.md) — download flow
 - [`docs/authentication.md`](docs/authentication.md) — auth mechanisms
 - [`docs/security.md`](docs/security.md) — threat model and controls
+- [`docs/migration.md`](docs/migration.md) — curl/wget → goget flag mapping
+- [`docs/development.md`](docs/development.md) — dev workflow, releases, CI
 
 ## Contributing