feat: add security audit automation scripts and detailed vulnerability documentation

Scripts/fuzz_runner.sh

@@ -0,0 +1,27 @@
+#!/bin/sh
+BIN="/root/ghaymah-v2-test/gy-linux-amd64"
+echo "=== Starting CLI Flag Fuzzing Audit ==="
+
+COMMANDS="deploy config login list logs tunnel info delete"
+FLAGS="--file --json --debug --no-auto-update"
+
+TESTS=0
+PANICS=0
+
+for cmd in $COMMANDS; do
+  for flag in $FLAGS; do
+    for p in ";id" "&&ls" "|cat /etc/passwd" '$(whoami)' "NULL_BYTE_\x00" "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"; do
+      TESTS=$((TESTS + 1))
+      OUT=$($BIN $cmd $flag "$p" 2>&1)
+      if echo "$OUT" | grep -qiE "(panic|runtime error|segmentation fault|nil pointer)"; then
+        echo "[CRITICAL PANIC DETECTED] gy $cmd $flag '$p'"
+        echo "Output snippet: $(echo "$OUT" | head -n 3)"
+        PANICS=$((PANICS + 1))
+      fi
+    done
+  done
+done
+
+echo "=== Flag Fuzzing Completed ==="
+echo "Total tests run: $TESTS"
+echo "Total panics observed: $PANICS"