Phase 8.1: fix NetExec build deps + Dalfox tar extraction

Fix: preserve execute bit in tar extraction + improve binary finder for dalfox

Phase 8.1: fix broken tool installs

Docs: note per-user latest-$USER symlink for non-root scans

Add nuclei -duc flag + per-user latest symlink

Fix _pf_tmp unbound variable in EXIT trap

Fix passwords wordlist URL (use 10k-most-common.txt)

Fix Phase 8 blockers: NUL check bug + wordlist 404s

Docs: remove literal update-templates string from plan

Docs: align plan with shared nuclei templates + update log path

Fix nits: Nuclei -t in CLAUDE.md + trufflehog .err file cleanup

Phase 8 prep: finish remaining blockers (nuclei templates, wafw00f JSON, safe extract)

Phase 8 prep: fix security + installer/runtime must-fix issues

Phase 7: add README, CREDITS, LICENSE

Phase 6: add stripe-check payment audit