Curl: We stop the bug-bounty end of Jan 2026