Update signed manifest to 7.28.4

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.23.31",
-    "released_at": "2026-08-12T15:21:11+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.31/argus-wordpress-defence-7.23.31.zip",
-    "sha256": "32bc52ca330a96ea39ea645845687bb49aceaf9fda37ec5362254d5255fcc059",
+    "version": "7.28.4",
+    "released_at": "2026-09-02T15:15:16+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.28.4/argus-wordpress-defence-7.28.4.zip",
+    "sha256": "cf52ee57ad4a7b8bacebf65311e4aafbcf7ec01b43ce195a88219acf3a05b316",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Fixed: right after ARGUS checked for updates, its own health check could momentarily read that\n  timestamp before it was refreshed and report \"hasn't checked for updates\" -- the two checks now\n  run in the correct order.\n* The health-check findings for scanner/update/intelligence timing now explain the most common\n  real cause specifically -- WordPress's own scheduled-task system (WP-Cron) not firing reliably,\n  common on low-traffic sites or hosts without a real system cron configured -- instead of a\n  generic \"contact support.\"",
-    "signature": "OzT7amiVmnb2viT+xAnMIfepOYPag5V9F34qNcxtd8Vw6qd0OE9cO8D5iCQn8wXE7jRUKloxq7/UI+Y5LW14Dw=="
+    "summary": "* Fixed a bug where a brute-force login attack that ARGUS had already blocked could keep showing\n  as an active finding and unnecessarily lower your Security Score, even though the attack was\n  already stopped. Blocked attacks are now correctly marked as automatically handled.",
+    "signature": "Se38Rj8baM5nPoudeBAwd890pxtMp4i4RRb16r4j5Hi0hfLrJM7EaOy0kcayrSIUKeNaQl1lkrhToHS6/vjkDA=="
 }