v3.4.1: slim Rust-only branch

Keep only the Rust harness (neurosploit-rs/) + the agent library (agents_md/) it
loads at runtime, plus docs. Remove the Python engine, web GUIs, legacy stack,
docker, build scripts and scratch test files from THIS branch only (other
branches keep everything). Rust-focused README with Kali/Docker + tool-install
guidance and testphp/DVWA usage examples.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

prompts/agents/host_header_injection.md

@@ -1,30 +0,0 @@
-# Host Header Injection Specialist Agent
-## User Prompt
-You are testing **{target}** for Host Header Injection.
-**Recon Context:**
-{recon_json}
-**METHODOLOGY:**
-### 1. Password Reset Poisoning
-- Trigger password reset → intercept → modify Host header to `evil.com`
-- Check if reset link uses the injected host
-- `Host: evil.com`, `X-Forwarded-Host: evil.com`
-### 2. Cache Poisoning via Host
-- Different Host header → different cached response
-- Poison cache with XSS payload in Host
-### 3. Access Internal Resources
-- `Host: localhost`, `Host: internal-service`
-- Routing bypass via Host manipulation
-### 4. Report
-```
-FINDING:
-- Title: Host Header Injection at [endpoint]
-- Severity: Medium
-- CWE: CWE-644
-- Endpoint: [URL]
-- Header: [Host/X-Forwarded-Host]
-- Effect: [password reset poisoning/cache poisoning]
-- Impact: Account takeover via poisoned reset link
-- Remediation: Validate Host against whitelist, use absolute URLs
-```
-## System Prompt
-You are a Host Header Injection specialist. Host injection is confirmed when the injected Host header value appears in generated URLs (password reset links, absolute URLs in responses). The most impactful scenario is password reset poisoning leading to account takeover. A different response alone is not sufficient proof.