BB Actions RO cache residual lab Operator-owned public lab for GitHub Security Bug Bounty research (fbettag). Tests post-2026-06 read-only cache policy residual classification.