v0.1.1: Major AI improvements, new security modules, and documentation fixes

## AI & CVE Improvements
- Fix AI report to display actual subdomain names instead of generic placeholders
- Add 10-year CVE filter to reduce false positives from outdated vulnerabilities
- Integrate CISA KEV (Known Exploited Vulnerabilities) database support
- Improve AI analysis prompt for more accurate security findings

## New Security Modules
- Add wildcard DNS detection with multi-phase validation (DNS + HTTP)
- Add TLS certificate analyzer for certificate chain inspection
- Add comprehensive rate limiting module for API requests
- Add retry mechanism with exponential backoff
- Add stealth mode for reduced detection during scans
- Add progress tracking module for better UX

## Code Refactoring
- Extract scanner output logic to dedicated module
- Add base source interface for consistent passive source implementation
- Reduce admin panel paths to common generic patterns only
- Improve HTTP client with connection pooling
- Add JSON output formatter

## Documentation Updates
- Correct passive source count to 20 (was incorrectly stated as 34)
- Fix AI model names: deepseek-r1:1.5b (fast) + qwen2.5-coder:7b (deep)
- Update all markdown files for consistency
- Relocate demo GIFs to assets/ directory
- Add benchmark disclaimer for test variability

## Files Changed
- 4 documentation files updated (README, AI_SETUP, BENCHMARK, EXAMPLES)
- 11 new source files added
- 12 existing files modified

internal/security/discovery.go

@@ -20,13 +20,12 @@ func CheckAdminPanels(subdomain string, timeout int) []string {
 		},
 	}
 
-	// Common admin panel paths
+	// Generic admin paths (common across all platforms)
+	// Note: Removed platform-specific paths like /wp-admin, /admin.php, /phpmyadmin
+	// These generate false positives on non-PHP/WordPress sites
 	paths := []string{
-		"/admin", "/administrator", "/admin.php", "/admin.html",
-		"/login", "/login.php", "/signin", "/auth",
-		"/wp-admin", "/wp-login.php",
-		"/phpmyadmin", "/pma", "/mysql",
-		"/cpanel", "/webmail",
+		"/admin", "/administrator",
+		"/login", "/signin", "/auth",
 		"/manager", "/console", "/dashboard",
 		"/admin/login", "/user/login",
 	}
@@ -200,15 +199,16 @@ func CheckAPIEndpoints(subdomain string, timeout int) []string {
 // WithClient versions for parallel execution
 
 func CheckAdminPanelsWithClient(subdomain string, client *http.Client) []string {
+	// Generic admin paths (common across all platforms)
 	paths := []string{
-		"/admin", "/administrator", "/admin.php", "/admin.html",
-		"/login", "/login.php", "/signin", "/auth",
-		"/wp-admin", "/wp-login.php",
-		"/phpmyadmin", "/pma", "/mysql",
-		"/cpanel", "/webmail",
+		"/admin", "/administrator",
+		"/login", "/signin", "/auth",
 		"/manager", "/console", "/dashboard",
 		"/admin/login", "/user/login",
 	}
+	// Note: We removed platform-specific paths like /wp-admin, /admin.php, /login.php
+	// These generate false positives on non-PHP/WordPress sites
+	// The tech detection should be used to check platform-specific paths
 
 	var found []string
 	baseURLs := []string{