Add bounded scans and reliability fixes

[DevCop95]

Summary

• Add hostname/certificate limits, progress output, and an overall scan deadline.
• Stop blocked DNS work on timeout and clean up workers if the supervisor exits.
• Handle incomplete HTTP responses, validate timeout values, and honor color controls.
• Pipeline per-host checks and update README/Unreleased changelog without changing v1.0.5.

Validation

• 41 unittest tests pass, including real spawned-worker deadline checks.
• Local HTTP integration checks and bounded passive CTL queries pass.
• Editable installation, installed CLI, Bash and PowerShell launchers verified.
• Bandit: no medium/high severity findings; compileall and diff checks pass.