Add Tilt HUD auth fix reference

[cookesan]

Adds Tilt HUD auth fix reference to GHSA-c73q-8xxr-rgqm.

Audit refresh, July 8, 2026:

• Confirmed the live PR is open, ready for review, merge-clean, and the visible advisory check is green.
• Rechecked the merge-base diff: exactly one advisory JSON file changes (advisories/github-reviewed/2026/06/GHSA-c73q-8xxr-rgqm/GHSA-c73q-8xxr-rgqm.json), JSON parses, git diff --check passes, and the exact-head worktree is clean.
• Revalidated the added public references in the diff; all resolve through their source site or registry.

[cookesan]

Refreshed on July 8, 2026:

• GHSA-c73q-8xxr-rgqm remains public and maps to CVE-2026-55884.
• Verified tilt-dev/tilt PR [GHSA-m7xq-9374-9rvx] Mongoose search injection vulnerability #6776, commit 47393fba7f6ef5e305d5e814551feef8e4acbc0a, release v0.37.4, and the Go module proxy record for github.com/tilt-dev/tilt v0.37.4.
• Checked NVD on July 8, 2026; no NVD record is currently published for CVE-2026-55884.
• Local validation passed: jq empty and git diff --check.

No affected range, package, or severity changes are included.