whitepaper: re-add 10 missing entries + 11 new defects this session, count 578→590; rebuild PDF

defects/spring/patch/spring-0001-0002-beanfactory-linkedhashset.patch

@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000295
 From 5708b73 Mon Sep 17 00:00:00 2001
 Subject: [PATCH] CWE-407: spring-0001/0002 — fix O(B²) contains() in
  mergeNamesWithParent and ImportStack

defects/spring/patch/spring-0003-0004-eventmulticaster-linkedhashset.patch

@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000296
 From 0000002 Mon Sep 17 00:00:00 2001
 Subject: [PATCH] CWE-407: spring-0003/0004 — fix O(n²) ArrayList.contains()
  in AbstractApplicationEventMulticaster