PyPI project page renders repository-relative README links and images as 404

Problem

The PyPI long description is populated directly from README.md. The README contains 23 repository-relative link/image occurrences representing 21 unique targets.

On https://pypi.org/project/protenix/, these resolve under pypi.org/project/protenix/... or PyPI camo rather than the GitHub repository, and all 21 unique targets return 404.

Affected content includes:

• Protenix-v1/v2 technical reports
• input, model, training, benchmark, MSA, and data-preparation documentation
• inference_demo.sh
• CONTRIBUTING, CODE_OF_CONDUCT, and LICENSE
• all five README images
• local source links
• the vulnerability-reporting email

Two source links are also independently invalid in the GitHub README: protenix/openfold_local/ no longer exists, and the security email lacks a mailto: scheme.

Reproduction

1. Open https://pypi.org/project/protenix/.
2. Follow any repository-relative documentation target, for example the Protenix-v2 report (docs/PX2.pdf) or training instructions (docs/training_inference_instructions.md).
3. Observe that the target resolves under PyPI and returns 404. The five repository-relative images similarly return 404 through PyPI camo.

Verified against commit 4c355be4553512f72453ecbfb65e69f4c35d1413 and the current PyPI 2.0.0 page.

Expected behavior

Links and images in the published long description should resolve to the canonical repository content, and the security email should open as an email link.

Impact

Users arriving from PyPI cannot access the main documentation, reports, license, contribution guide, security contact, or benchmark images.

Suggested fix

Use canonical absolute GitHub URLs for repository documents/scripts and raw.githubusercontent.com URLs for images, remove the obsolete local openfold_local link, and use mailto:sec@bytedance.com.

This would keep a single README source and fix GitHub, PyPI, wheel metadata, sdist metadata, and downstream renderers without adding a build dependency.

Start in README.md and compare its 23 repository-relative link and image occurrences with the published PyPI page. Update the documented targets as described, remove the obsolete openfold_local link, and make the security address a mailto link. Done means the documentation, scripts, images, repository links, and email resolve correctly from the PyPI long description.