🛡️ feat: Ghaymah CLI v2 — Security & QA Audit Repository

Comprehensive security audit of the Ghaymah CLI v2 and web platform.

Findings:
  - [CRITICAL] T1552: Dockerfile & .env Credential Leakage
  - [CRITICAL] OWASP A07: Missing OTP & Unverified Password Change
  - [HIGH]     T1539: Session Token Revocation Bypass
  - [MED/HIGH] CWE-400: Configuration Poisoning DoS (Pipeline Hang)

Includes:
  - 8 Proof-of-Concept applications (PoC_Apps/)
  - Visual evidence & screenshots (Assets/Screenshots/)
  - Full PDF audit report (Reports/)
  - Mermaid.js attack flow diagrams in README

Auditor: Ziad Mahmoud Ahmed Abdelgwad — Cybersecurity Specialist

.gitignore

@@ -0,0 +1,33 @@
+# ============================================================================
+#  Ghaymah CLI v2 Audit — .gitignore
+# ============================================================================
+
+# ── CLI Binary (large / proprietary) ────────────────────────────────────────
+gy-linux-amd64
+
+# ── Windows Zone.Identifier metadata ────────────────────────────────────────
+*.Zone.Identifier
+*:Zone.Identifier
+
+# ── Sensitive environment files ─────────────────────────────────────────────
+.env
+.env.*
+!.env.example
+
+# ── OS-generated files ──────────────────────────────────────────────────────
+.DS_Store
+Thumbs.db
+Desktop.ini
+
+# ── IDE / Editor files ──────────────────────────────────────────────────────
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# ── Node / build artifacts ──────────────────────────────────────────────────
+node_modules/
+dist/
+build/
+*.log