The Megalodon GitHub Actions attack hit 5,561 repos in 6 hours by looking exactly like your CI bot — technical breakdown inside