documentation: Updating project readme to include atproto-lexicon crate ref

Cargo.toml

···
     "crates/atproto-oauth",
     "crates/atproto-record",
     "crates/atproto-xrpcs-helloworld",
-    "crates/atproto-xrpcs", "crates/atproto-lexicon",
+    "crates/atproto-xrpcs",
+    "crates/atproto-lexicon",
 ]
 resolver = "3"
 

Dockerfile

···
 # Build all binaries in release mode
 # This will build all binaries defined in the workspace:
 # - atproto-identity: 4 binaries (resolve, key, sign, validate)
-# - atproto-record: 2 binaries (sign, verify)  
+# - atproto-record: 2 binaries (sign, verify)
 # - atproto-client: 3 binaries (auth, app-password, dpop)
 # - atproto-oauth: 1 binary (service-token)
 # - atproto-oauth-axum: 1 binary (oauth-tool)
 # - atproto-jetstream: 1 binary (jetstream-consumer)
 # - atproto-xrpcs-helloworld: 1 binary (xrpcs-helloworld)
-# Note: atproto-identity-resolve requires hickory-dns feature
+# - atproto-lexicon: 1 binary (lexicon-resolve)
+# Note: atproto-identity-resolve and atproto-lexicon-resolve require hickory-dns feature
 RUN cargo build --release --bins -F clap,hickory-dns,zeroize,tokio
 
 # Runtime stage - use distroless for minimal attack surface
···
 COPY --from=builder /usr/src/app/target/release/atproto-oauth-tool .
 COPY --from=builder /usr/src/app/target/release/atproto-xrpcs-helloworld .
 COPY --from=builder /usr/src/app/target/release/atproto-jetstream-consumer .
+COPY --from=builder /usr/src/app/target/release/atproto-lexicon-resolve .
 
 # Default to the main resolution tool
 # Users can override with specific binary: docker run <image> atproto-identity-resolve --help
···
 #   docker run <image> atproto-record-sign --help
 #   docker run <image> atproto-client-auth --help
 #   docker run <image> atproto-oauth-service-token --help
-#   docker run <image> atproto-oauth-tool --help  
+#   docker run <image> atproto-oauth-tool --help
 #   docker run <image> atproto-xrpcs-helloworld --help
 #   docker run <image> atproto-jetstream-consumer --help
+#   docker run <image> atproto-lexicon-resolve --help
 CMD ["atproto-identity-resolve", "--help"]
 
 # Add labels for documentation
···
 LABEL org.opencontainers.image.licenses="MIT"
 
 # Document available binaries
-LABEL binaries="atproto-identity-resolve,atproto-identity-key,atproto-identity-sign,atproto-identity-validate,atproto-record-sign,atproto-record-verify,atproto-client-auth,atproto-client-app-password,atproto-client-dpop,atproto-oauth-service-token,atproto-oauth-tool,atproto-jetstream-consumer,atproto-xrpcs-helloworld"
+LABEL binaries="atproto-identity-resolve,atproto-identity-key,atproto-identity-sign,atproto-identity-validate,atproto-record-sign,atproto-record-verify,atproto-client-auth,atproto-client-app-password,atproto-client-dpop,atproto-oauth-service-token,atproto-oauth-tool,atproto-jetstream-consumer,atproto-xrpcs-helloworld,atproto-lexicon-resolve"

README.md

···
 
 ## Components
 
-This workspace contains 9 specialized crates that work together to provide complete AT Protocol application development capabilities:
+This workspace contains 10 specialized crates that work together to provide complete AT Protocol application development capabilities:
 
 ### Identity & Cryptography
 
 - **[`atproto-identity`](crates/atproto-identity/)** - Core identity management with multi-method DID resolution (plc, web, key), DNS/HTTP handle resolution, and P-256/P-384/K-256 cryptographic operations. *Includes 4 CLI tools.*
 - **[`atproto-record`](crates/atproto-record/)** - Cryptographic signature operations for AT Protocol records using IPLD DAG-CBOR serialization with AT-URI parsing support. *Includes 2 CLI tools.*
+- **[`atproto-lexicon`](crates/atproto-lexicon/)** - Lexicon schema resolution and validation for AT Protocol, supporting recursive resolution, NSID validation, and DNS-based lexicon discovery. *Includes 1 CLI tool.*
 
 ### Authentication & Authorization  
 
···
 [dependencies]
 atproto-identity = "0.12.0"
 atproto-record = "0.12.0"
+atproto-lexicon = "0.12.0"
 atproto-oauth = "0.12.0"
 atproto-oauth-aip = "0.12.0"
 atproto-client = "0.12.0"
···
 }
 ```
 
+### Lexicon Resolution
+
+```rust
+use atproto_lexicon::resolve::{DefaultLexiconResolver, LexiconResolver};
+use atproto_identity::resolve::HickoryDnsResolver;
+
+#[tokio::main]
+async fn main() -> anyhow::Result<()> {
+    let http_client = reqwest::Client::new();
+    let dns_resolver = HickoryDnsResolver::create_resolver(&[]);
+    let resolver = DefaultLexiconResolver::new(http_client, dns_resolver);
+
+    // Resolve a lexicon schema
+    let lexicon = resolver.resolve("app.bsky.feed.post").await?;
+    println!("Lexicon schema: {}", serde_json::to_string_pretty(&lexicon)?);
+
+    Ok(())
+}
+```
+
 ### Record Signing
 
 ```rust
···
 #[tokio::main]
 async fn main() -> anyhow::Result<()> {
     let signing_key = identify_key("did:key:zQ3shNzMp4oaaQ1gQRzCxMGXFrSW3NEM1M9T6KCY9eA7HhyEA")?;
-    
+
     let record = json!({
         "$type": "app.bsky.feed.post",
         "text": "Hello AT Protocol!",
         "createdAt": "2024-01-01T00:00:00.000Z"
     });
-    
+
     let signature_object = json!({
         "issuer": "did:plc:issuer123",
         "issuedAt": "2024-01-01T00:00:00.000Z"
     });
-    
+
     let signed_record = signature::create(
         &signing_key,
         &record,
···
         "app.bsky.feed.post",
         signature_object,
     ).await?;
-    
+
     Ok(())
 }
 ```
···
 
 ## Command Line Tools
 
-The workspace includes 12 command-line tools across multiple crates, providing ready-to-use utilities for AT Protocol development and testing. All CLI tools require the `clap` feature:
+The workspace includes 13 command-line tools across multiple crates, providing ready-to-use utilities for AT Protocol development and testing. All CLI tools require the `clap` feature:
 
 ```bash
 # Build with CLI support
···
 # Record operations (atproto-record crate)
 cargo run --features clap --bin atproto-record-sign -- did:key:... did:plc:issuer record.json repository=did:plc:user collection=app.bsky.feed.post
 cargo run --features clap --bin atproto-record-verify -- did:plc:issuer did:key:... signed_record.json repository=did:plc:user collection=app.bsky.feed.post
+
+# Lexicon operations (atproto-lexicon crate)
+cargo run --features clap,hickory-dns --bin atproto-lexicon-resolve -- app.bsky.feed.post
 
 # Client operations (atproto-client crate)
 cargo run --features clap --bin atproto-client-auth -- login alice.bsky.social password123