docs: credit @spreaderman for v0.31.11.0 installer bug reports

Add @spreaderman to a new "Bug Reporters" section in README.md (kept
separate from Security Hall of Fame since these are functional, not
security bugs) and attribute both v0.31.11.0 installer fixes in
CHANGELOG.md.

Author: bertugfahriozer

CHANGELOG.md

@@ -8,8 +8,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 
 ### Fixed
 
-- **CRITICAL — Web Installer Broken (404 on `/install/dbsetup`):** `Install::index()` redirected the browser to `install/dbsetup` after writing `.env`, but the route was registered as `POST`-only. The 302 redirect issued a `GET` request, producing `404 — Can't find a route for 'GET: install/dbsetup'` and aborting every web installation. The two-step request flow also relied on flashdata that was lost across the redirect on some session drivers. `index()` now invokes the migration + seed pipeline directly in the same request (no HTTP redirect, no flashdata), and the `install/dbsetup` route was removed entirely to eliminate the dead public endpoint. Reported by community installation feedback.
-- **CRITICAL — CLI Installer Migration Failure (`profileIMG` Default Value):** The `users` table migration declared `profileIMG` as `TEXT NOT NULL` with a string `default`. MySQL/MariaDB reject this with `BLOB, TEXT, GEOMETRY or JSON column 'profileIMG' can't have a default value` on every server version that does not silently relax the rule (most Linux distros, all default strict-mode installs), so `php spark ci4ms:setup` aborted at Step 5/6 before the database was usable. Changed the column to `VARCHAR(255) NULL` so the default URL is preserved and the migration succeeds on every supported MySQL/MariaDB version.
+- **CRITICAL — Web Installer Broken (404 on `/install/dbsetup`) (reported by [spreaderman](https://github.com/spreaderman)):** `Install::index()` redirected the browser to `install/dbsetup` after writing `.env`, but the route was registered as `POST`-only. The 302 redirect issued a `GET` request, producing `404 — Can't find a route for 'GET: install/dbsetup'` and aborting every web installation. The two-step request flow also relied on flashdata that was lost across the redirect on some session drivers. `index()` now invokes the migration + seed pipeline directly in the same request (no HTTP redirect, no flashdata), and the `install/dbsetup` route was removed entirely to eliminate the dead public endpoint.
+- **CRITICAL — CLI Installer Migration Failure (`profileIMG` Default Value) (reported by [spreaderman](https://github.com/spreaderman)):** The `users` table migration declared `profileIMG` as `TEXT NOT NULL` with a string `default`. MySQL/MariaDB reject this with `BLOB, TEXT, GEOMETRY or JSON column 'profileIMG' can't have a default value` on every server version that does not silently relax the rule (most Linux distros, all default strict-mode installs), so `php spark ci4ms:setup` aborted at Step 5/6 before the database was usable. Changed the column to `VARCHAR(255) NULL` so the default URL is preserved and the migration succeeds on every supported MySQL/MariaDB version.
 
 ### Changed
 

README.md

@@ -215,3 +215,13 @@ A huge thank you to the security researchers who have helped make **ci4ms** more
 | **[dapickle](https://github.com/dapickle)** | Identified Critical Authenticated RCE in Theme installation, Arbitrary Database Table Drop in Theme module, and a Session Management Bypass. | Apr 2026 |
 
 > If you find a security vulnerability, please report it via [Security Policy](SECURITY.md).
+
+## 🐞 Bug Reporters
+
+Thanks to the community members who report functional bugs and help us catch regressions before they hit more users.
+
+| Contributor | Contribution | Date |
+| :--- | :--- | :--- |
+| **[spreaderman](https://github.com/spreaderman)** | Reported two installation-blocking regressions in v0.31.10.0: the web installer returning `404 GET install/dbsetup` after the configuration step, and `php spark ci4ms:setup` aborting on the `users.profileIMG` migration due to a `TEXT` column with a default value (rejected by MySQL/MariaDB strict mode). | May 2026 |
+
+> Found a non-security bug? Please [open an issue](https://github.com/ci4-cms-erp/ci4ms/issues) with reproduction steps.