v0.1.4: pentest_lookup_group + WAF bypass expansion

pentest_lookup_group + WAF bypass expansion

Adds ATT&CK threat group/software lookup and expands the WAF bypass dataset from 10 to 34 entries with 3 new WAF products.

Added:

• pentest_lookup_group — looks up ATT&CK intrusion sets (G-prefix) and software (S-prefix) by ID or name; returns aliases, type, description, and up to 20 technique-use entries with procedure context (#3)
• AttackGroup index in attack-service — groupById/groupKeywordIndex maps from intrusion-set/malware/tool STIX objects; lookupGroupById() and searchGroups() methods

Changed:

• WAF bypass dataset: 10 → 34 entries; new WAF coverage: F5 BIG-IP ASM, Nginx ModSecurity, Fortinet FortiWAF; new categories per existing WAF products (#4)
• pentest_generate_payloads waf_profile enum: f5_bigip_asm, nginx_modsecurity, fortinet_fortiwaf added

128 tests pass; bun run devcheck clean.