feat(devenv): use node@latest instead of fixed version 22

feat(recon): add ffuf_recursive functions and recursive.txt wordlist

refactor(caido): remove MCP server, keep only official caido/skills

refactor(setup): extract shared libs, fix bugs, remove orphan files

feat(skills): add postMessage, OAuth, CSPT, and XS-Leak patterns to security skills

feat(caido): add MCP setup script and caido-renew alias

feat(skills): enhance security skills and add web3-audit skill

feat(skills): add Brain Dump mandate and Frontend-to-Backend phase to security skills

update agent models, improve skills and add rofi launcher config

feat(skills): add apk-bugbounty skill for Android static analysis

change recon flow

change models to GLM and Antigravity

add ohmyopencode config

feat(skills): add install script for js-code-analysis skill

docs: mark all js-code-analysis-skill tasks as complete