Bug-BOUNTY.md: we stop the bug-bounty end of Jan 2026