* Create a documentation home for the BAS feature set.
* Document DAST's new `DAST_FF_ENABLE_BAS` CI variable which enables
OAST through callback attacks.

See also https://gitlab.com/gitlab-org/gitlab/-/issues/402784.