docs: update README for Hold/cascade/security features and sync deploy script entries

Update README v5.5 with Hold Overview/History pages, cascade filters,
table query whitelist, WIP filter preservation, and review hardening
changelog. Sync start_server.sh required frontend entries to cover all
13 Vite-built pages.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

scripts/start_server.sh

@@ -227,11 +227,20 @@ build_frontend_assets() {
 
     local required_entries=(
         "portal.js"
+        "wip-overview.js"
+        "wip-detail.js"
+        "hold-detail.js"
+        "hold-overview.js"
+        "hold-history.js"
         "resource-status.js"
         "resource-history.js"
         "job-query.js"
         "excel-query.js"
         "tables.js"
+        "query-tool.js"
+        "tmtt-defect.js"
+        "qc-gate.js"
+        "mid-section-defect.js"
     )
     local needs_build=false
     local newest_entry=""