v4.6.0 — verified 61-CVE exploit set + 33 registry weapons + payload harness

v4.6.0 — exploit verification, reorg, registry + payload harness (authorized lab use only)

Verified

• All 64 Desktop CVE deploy.py modules compile clean, zero placeholder flags; raw-protocol implementations confirmed (e.g. stdlib SMB1/MS17-010 client).
• Removed: 186-file identical nested duplicate tree inside CVE-2024-4438; stray 1-byte copy artifact.
• Merged bare dirs into CVE-number+description homes (Baron Samedit .c, PwnKit .c, nftables .c — all real vendored PoCs, hash-matched with weapons/poc/src/).
• Replaced eight 1-byte stub inits with real package markers.

Reorganized (Desktop Exploits)

• zero-click_exploits/_cve/{android,bluetooth,browser,ios,messaging,network,webapp,wifi,windows}/ (49 CVEs)
• zero-day_exploits/_cve/{linux,network-device,windows}/ (12 CVEs)
• tools/ (20 tool dirs), archive/ (exploit-db-scale dumps)

Repo integration

• ZERO_DAY_REGISTRY: 29 -> 62 entries (15 real network probes in remote_v3.py, 18 zero-click staging checks in media_v3.py). Every entry resolves and fires without raising (verified against TEST-NET-1).
• exploits/: 73 payload-builder modules, run_all.py builds 64 hashed artifacts into dist/ (PASS 64/64 verify).
• Fixed: CVE-2026-106382 truncation bug, Windows CRLF hash drift on .c sidecars, fcntl guards for Windows, adb-TLS typo, catalog search()-shape crash, dist-archive registry parity (3 entries backported with implementations).
• CI: payloads.yml (build+test+verify+lock diff) and kernel-exploits.yml (compile gate).

Tests

• tests/test_payloads.py: 47 passed, 2 skipped (manifest-gated)
• tests/test_catalog.py + tests/test_registry.py: pass
• tests/test_dist_parity.py: pass