Reformat the README using markdown - #1

Reformat the README using markdown

Parse headers from saved request

Adds the third detection technique alongside boolean operator and content-based
$where: time-based blind, for SSJI where match vs no-match has no content signal.

- _detect_time: inject an unconditional delay (sleep(), or a portable busy-wait
  IIFE) into each $where breakout template; confirm by response time vs a
  baseline, with a no-delay control to reject generally-slow endpoints.
- _where_time_is_true: per-char oracle '(cond ? <delay> : 0)' where cond is
  this.<field>.test(/regex/); reuses the binary-search walker -> any field
  extractable by timing.
- Auto-fallback: runs when no genuine $where CONTENT finding exists, so
  operator-injection ERROR responses (e.g. 'Missing parameter' for an array)
  don't mask a real time-based $where. Cheap when not vulnerable (the payload
  sits inside a string and never executes).
- New breakout templates dq-eqeq/sq-eqeq (the canonical " || (..) || ""==").
- Flags: --timeBased {auto,y,n}, --timeDelay ms; request timeout scales with it.

Validated: a content-blind local mock (no signal -> detected+extracted via delay)
and live on a real time-based SSJI lab (Werkzeug/Python front, MongoDB $where
sleep) -> detected and blind-extracted the username 'bmdyy'.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>