🛡️ feat: Ghaymah CLI v2 — Security & QA Audit Repository

Comprehensive security audit of the Ghaymah CLI v2 and web platform.

Findings:
  - [CRITICAL] T1552: Dockerfile & .env Credential Leakage
  - [CRITICAL] OWASP A07: Missing OTP & Unverified Password Change
  - [HIGH]     T1539: Session Token Revocation Bypass
  - [MED/HIGH] CWE-400: Configuration Poisoning DoS (Pipeline Hang)

Includes:
  - 8 Proof-of-Concept applications (PoC_Apps/)
  - Visual evidence & screenshots (Assets/Screenshots/)
  - Full PDF audit report (Reports/)
  - Mermaid.js attack flow diagrams in README

Auditor: Ziad Mahmoud Ahmed Abdelgwad — Cybersecurity Specialist

PoC_Apps/test-app/.gy.json

@@ -0,0 +1,13 @@
+{
+  "app": "test-app",
+  "project": "test-app",
+  "_app_id": "26e4bd36-b0e3-45c2-8654-225de8b268f8",
+  "_project_id": "9df8707b-17b5-417c-bfd5-ccbccd20858c",
+  "port": 8080,
+  "publicAccess": {
+    "enabled": true,
+    "domain": "test-app-66721af724a0.hosted.ghaymah.systems"
+  },
+  "resourceTier": "t1",
+  "_detected": "static"
+}

PoC_Apps/test-app/Dockerfile

@@ -0,0 +1,5 @@
+FROM python:3.9-slim
+WORKDIR /app
+COPY index.html .
+EXPOSE 8080
+CMD ["python", "-m", "http.server", "8080"]

PoC_Apps/test-app/index.html

@@ -0,0 +1 @@
+<h1>Ghaymah CLI v2 Test Successful</h1>