feat: add wave 2 plugins and --cprofile CLI flag

Add 7 new pure-stdlib plugins: whois (raw TCP port 43), portcheck
(async TCP connect scan with internal-net guard), httpcheck (HTTP
status/redirects/timing), tlscheck (TLS version/cipher/cert inspect),
blacklist (parallel DNSBL check against 10 RBLs), rand (password/hex/
uuid/bytes/int/coin/dice), and timer (async countdown notifications).

Add --cprofile flag to CLI for profiling bot runtime. Update all docs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docs/USAGE.md

@@ -16,6 +16,7 @@ derp --config /path/to/derp.toml --verbose
 |------|-------------|
 | `-c, --config PATH` | Config file path |
 | `-v, --verbose` | Debug logging |
+| `--cprofile [PATH]` | Enable cProfile, dump to PATH [derp.prof] |
 | `-V, --version` | Print version |
 | `-h, --help` | Show help |
 
@@ -68,6 +69,15 @@ level = "info"                # Logging level: debug, info, warning, error
 | `!revshell <type> <ip> <port>` | Generate reverse shell one-liner |
 | `!cidr <network>` | Subnet info (range, hosts, mask) |
 | `!cidr contains <net> <ip>` | Check if IP belongs to network |
+| `!whois <domain\|ip>` | WHOIS lookup via raw TCP (port 43) |
+| `!portcheck <host> [ports]` | Async TCP port scan (max 20 ports) |
+| `!httpcheck <url>` | HTTP status, redirects, response time |
+| `!tlscheck <host> [port]` | TLS version, cipher, cert details |
+| `!blacklist <ip>` | Check IP against 10 DNSBLs |
+| `!rand <mode> [args]` | Random: password, hex, uuid, bytes, int, coin, dice |
+| `!timer <duration> [label]` | Set countdown timer with notification |
+| `!timer list` | Show active timers |
+| `!timer cancel <label>` | Cancel a running timer |
 
 ### Command Shorthand