20-challenge suite benchmark: heaptrm 65% vs blind 25% overall

Benchmark: heaptrm 100% vs blind 0% on hard_heap (no UAF read, heap noise)

Verified: LLM-driven tcache poison with safe-linking bypass via heaptrm

Add exploit demo: step-by-step tcache poison through heaptrm tool

CVE benchmark: 4/5 real CVE patterns detected, 0 false positives

HeapTRM fuzzer: mutation-based fuzzing guided by heap corruption detection

Add heaptrm package: v2 harness, CLI, pwntools integration, CVE tests