feat: Launch Bug Bounty Program

[HuiNeng6]

Summary

• Define comprehensive bug bounty program structure
• Establish reward tiers: Critical (-), High (-), Medium (-), Low (-)
• Specify in-scope assets: Smart contracts, ZK circuits, SDK, Frontend
• Set up rules and submission process via Immunefi
• Include coordinated disclosure policy (90-104 day timeline)
• Provide safe harbor legal protection for researchers
• Add FAQ section and Hall of Fame

Key Features

1. Reward Tiers - Industry-competitive bounties for crypto projects
2. Scope Definition - Clear in-scope/out-of-scope boundaries
3. Submission Process - Via Immunefi (preferred) or email
4. Disclosure Policy - Responsible disclosure with timeline
5. Safe Harbor - Legal protection for good-faith researchers

Testing

• Document follows Immunefi best practices
• Covers all required program elements

Fixes #94

[HuiNeng6]

@ANAVHEOBA

📢 Follow-up — Ready for Review (24+ Hours)

This Bug Bounty Program PR is ready for review.

Implementation Complete:
✅ MERGEABLE - Clean, ready to merge
✅ Bug bounty program - Security incentive program
✅ Documentation - Program guidelines

Looking forward to your review! 🙏