This is a very clear roadmap, indeed, full of resources and in the perfect order, puuf, I wish I had it a few months ago :). Sharing, definitely!

In the final chapter "Reading Audit Reports" you can add https://solodit.xyz/ where they are dumping all the vulnerabilities found in code4rena, sherlock and others. For me, for example, I find it easier than reading the full report, while I'm learning the vulnerabilities.