Building CRA Watch (crawatch.dev): daily CISA KEV / OSV watch for the EU Cyber Resilience Act's 24-hour reporting rule.