Update signed manifest to 7.41.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.23.18",
-    "released_at": "2026-08-10T14:14:25+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.18/argus-wordpress-defence-7.23.18.zip",
-    "sha256": "757e47dc84fa8f113dd1e2dc0a0cb1436a98c37286b0fcf4835a87f419953b57",
+    "version": "7.41.0",
+    "released_at": "2026-09-17T11:36:03+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.41.0/argus-wordpress-defence-7.41.0.zip",
+    "sha256": "311dacbd64a9604dba16de4329203899dd5a85aac0f0e78ea5670e2123069958",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Added a way to download your MFA backup codes as a file right after they're generated, so you\n  don't have to copy them down by hand. You can optionally protect the file with your own\n  passphrase -- it's encrypted in your browser before saving, and a matching offline tool (linked\n  from the same page) lets you read it back later even if you can't reach your site's admin area.\n* Fixed an edge case in Safe Mode (the wp-config.php recovery switch) where a fresh security event\n  happening while Safe Mode was on could still block the request -- Safe Mode now reliably means no\n  blocking at all, matching what it has always said it does.",
-    "signature": "oLZpuEEZu+3hUkmR19i2ISNbeCycjhDO/aZ2ZwpxlBbTvAOI8LJh9+rc6G6Tnd404ttvaBR0nl6Y3QWrLYFBDw=="
+    "summary": "* Findings now have a complete lifecycle: Resolve, Reopen, Accept Risk, False Positive/Suppress,\n  Archive and Restore are all real, tracked actions (who did it, when, and why), available here in\n  wp-admin and, if this site is connected to a WAD account, from there too -- WAD is never a\n  separate copy of this data, every action there is carried out on this site the same way.\n* Contact Form 7's public feedback submission endpoint is now correctly recognised as an\n  intentional, documented part of that plugin's own public API, the same way WooCommerce's Store\n  API and Jetpack's public endpoints already were -- it no longer creates an unnecessary finding.",
+    "signature": "ebCSGFVp8NzohM7F8+os2MaNT67iyaYxNaxeKSrj+utKUL3qF30VF7qy69wvyBicttrKvtlqcbzhl53QBlMRCQ=="
 }