v1.6.0

What's Changed

• feat(pentest): send auth-profile headers on raw probes and support headers-only profiles by @Shahid-BugB in #97
• fix(pentest): require engine-observed proof before marking a finding confirmed by @Shahid-BugB in #98
• feat(pentest): add --target-type tauri source-surface mapper by @Animesh-Sri-bugb in #102
• feat(pentest): prove Tauri IPC commands in process with --tauri-prove by @Animesh-Sri-bugb in #103
• feat(pentest): prove upload-RCE, GraphQL amplification, brute-force bound, and race/TOCTOU under an authorized-sandbox gate by @Shahid-BugB in #99
• feat(pentest): support first-class no-login / anonymous pentests by @Shahid-BugB in #104
• feat(pentest): prove time-blind and error-based SQLi via engine oracles by @Shahid-BugB in #100
• feat(pentest): prove clickjacking via engine-observed action; hold OAuth/OIDC/SAML at unverified by @Shahid-BugB in #101
• feat(pentest): add exact GuardLink --threat-id selection and capabilities probe by @Shahid-BugB in #105
• docs: explain Tauri command proof and CLI baseline scanning by @Animesh-Sri-bugb in #106
• docs: explain Tauri and CLI testing in built-in help by @Animesh-Sri-bugb in #107
• Refresh the pentest pipeline automatically after binary upgrades by @Animesh-Sri-bugb in #108
• Prevent Windows CLI startup stack overflow by @Animesh-Sri-bugb in #109
• chore(release): prepare 1.6.0 by @Animesh-Sri-bugb in #110

Full Changelog: v1.5.0...v1.6.0