fix: D3FEND expandable cards, System page cleanup, and multi-source improvements

- Make D3FEND defense cards clickable with expandable details and external link
- Fix D3FEND URLs to use PascalCase technique names matching the ontology
- Remove duplicate Import Atomic Red Team from System page (use Data Sources)
- Add bulk Activate All / Deactivate All buttons with confirmation modal
- Fix template admin list to show both active and inactive templates
- Add PATCH /test-templates/bulk-activate backend endpoint
- Auto-seed data sources on container startup via entrypoint.sh
- Fix SigmaHQ, CALDERA, GTFOBins import issues
- Register D3FEND sync handler in data sources router
- Add CIS Controls v8 compliance framework import
- Expand Test Catalog source filters (CALDERA, LOLBAS, GTFOBins)
- Campaign Generate from Threat Actor now opens actor selector modal
- Add coverage snapshot creation button to Comparison page
- Update README with accurate data source and feature documentation

backend/app/services/lolbas_import_service.py

@@ -68,6 +68,8 @@ _GTFOBINS_FUNCTION_MAP: dict[str, str] = {
     "non-interactive-bind-shell": "T1059",
     "file-upload": "T1105",
     "file-download": "T1105",
+    "upload": "T1105",
+    "download": "T1105",
     "file-write": "T1105",
     "file-read": "T1005",
     "library-load": "T1129",
@@ -201,8 +203,11 @@ def _parse_gtfobins(root_dir: Path) -> list[dict]:
         logger.warning("GTFOBins directory not found at %s", gtfobins_root)
         return results
 
-    md_files = sorted(gtfobins_root.glob("*.md"))
-    logger.info("GTFOBins: Found %d markdown files", len(md_files))
+    md_files = sorted(
+        f for f in gtfobins_root.iterdir()
+        if f.is_file() and f.suffix in (".md", "")
+    )
+    logger.info("GTFOBins: Found %d files", len(md_files))
 
     for md_path in md_files:
         binary_name = md_path.stem  # e.g. "awk"
@@ -259,8 +264,12 @@ def _parse_gtfobins(root_dir: Path) -> list[dict]:
 
 
 def _extract_front_matter(content: str) -> dict | None:
-    """Extract YAML front-matter from a markdown file."""
-    match = re.match(r"^---\s*\n(.*?)\n---", content, re.DOTALL)
+    """Extract YAML front-matter from a markdown/GTFOBins file.
+
+    Supports both ``---/---`` (standard front-matter) and ``---/...``
+    (YAML document-end marker used by GTFOBins).
+    """
+    match = re.match(r"^---\s*\n(.*?)\n(?:---|\.\.\.)", content, re.DOTALL)
     if not match:
         return None
     try: