v1.5.0: corpus 100 to 222, AI-runtime + agent-tooling CVE wave

Corpus 100 -> 222 rules across Open WebUI, vLLM, SGLang, Flowise (the corpus's first agentflow/low-code-LLM-builder theme), NLTK, Bedrock AgentCore, NVIDIA Triton, stable-diffusion.cpp, MaxKB, RAGFlow, Gradio, mem0, Ollama, GitLab MCP and the Miasma npm worm cluster. Multi-backend conversion re-measured against the full 222-rule corpus: Splunk and OpenSearch-PPL convert all 222, the Lucene-family targets convert 212 -- the 10 correlation rules are a backend capability gap, not a rule defect. DEMO.md, README.md and plugin.json are all under readme_stamp's reach now, so published counts re-measure instead of drifting. Full entry, including rejected candidates, in CHANGELOG.md.