The Czech engineer rushed to distribute fixes after critical flaws were uncovered in PHP. As AI speeds up the hunt for security weaknesses, volunteers like him are increasingly stretched thin