update: README.md

xBB: trigger webhook delivery for 169.254.169.254/latest/api/token test

Test commit to trigger webhook delivery for 127.0.0.2 SSRF check

xBB: trigger webhook delivery for localhost test

xBB: trigger webhook 127.1:80 delivery test 20260603

xBB: trigger webhook delivery 20260603

xBB: bypass round 2 all localhost variants

xBB: GET webhook test 20260603

xBB: bypass ALLOWED_HOST_LIST test 20260603

xBB: second push test 20260603

xBB: init webhook check 20260603

feat: spoofed verified commit

feat: normal verified commit

Initial commit

fix: patch critical auth bypass vulnerability