v5.18.0

• (fix) avoid --sniff file false positives for .db URLs that resolve to textual soft-404 or fallback pages, while preserving real database/file and secret findings.
• (fix) classify small explicit archive/download paths such as *.zip as OK (File) even when MIME metadata is missing or misleading, while preserving soft-200 HTML fallback suppression.
• (fix) CLI Runtime diagnostics queue accounting by reporting post-consume deduplicated requests separately from submitted and pre-request skipped items.
• (fix) --sniff malware false positive where benign hidden iframes used as local form targets on legacy login pages were reported as hidden iframe injection.
• (feature) added target TLS context foundation with opt-in mTLS client certificate support via --client-cert, --client-key, and --client-key-password-env, covering direct HTTPS, HTTP CONNECT proxy HTTPS, SOCKS HTTPS, and --tls-legacy composition without changing default HTTPS behavior or persisting secret values.
• (enhancement) improve --sniff malware detection for an exposed PHP source by correlating decoder chains with dangerous dynamic execution/include sinks without adding probes or CLI options.
• (enhancement) detect NemesidaWAF custom 222 block responses without scan aborts, including status/header/body-based WAF fingerprinting and safe fallback classification.
• (enhancement) detect a Plesk hosting platform without affecting WAF blocked-response semantics or request volume.
• (enhancement) improve MODX CMS detection from X-Powered-By headers.
• (performance) browser runtime cleanup lifecycle to preserve scan results and crawl diagnostics until reports are finalized, while releasing heavy in-memory request/cache state after result consumption.
• (dictionary) cleaned and normalized the internal directories list (+374 potential interesting paths).
• (build) added Chocolatey package metadata for Windows distribution.
• (deps-dev) PR#127 bump the python-runtime-dependencies group across 1 directory with 3 updates