BOLT 2.0 — Major update

• Manipulator promoted to dedicated tab with 5-step wizard, path param editing, and smart autocomplete
• Real-time BOLA, RBAC, and Mass Assignment detection with live findings banner
• New Auth tab: auto-detects JWT, API keys, Basic auth, and cookies from traffic
• Params tab now extracts response parameters with Input/Response filtering
• Endpoints tab with expandable tree view synced to APIs tab
• Flag requests with 7 colors and filter by flag
• Exclude Picker: hide noisy endpoints, subdomains, or domains
• Inline signup flow with tutorial video for new users
• OAS export picker: choose which APIs to export
• Bug fixes: context invalidation, clipboard errors, XHR memory leak, scroll issues

Fixed display bug that prevented scrolling results.