Facebook’s parent company has also expanded bug-bounty payouts to include Oculus and other “metaverse” gadgets for AR/VR.