Update signed manifest to 7.37.1

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.28.1",
-    "released_at": "2026-08-16T07:25:21+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.28.1/argus-wordpress-defence-7.28.1.zip",
-    "sha256": "88a0cca8bd117a39a12f0e3bec7900691b2eadab6fc51e8c4d02592ae4f0dd00",
+    "version": "7.37.1",
+    "released_at": "2026-09-15T16:45:42+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.37.1/argus-wordpress-defence-7.37.1.zip",
+    "sha256": "daa33299e82da0d1ae6af271b9f6795f57e7ee11fe034b34e1ebc5ad6478daae",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* MFA is now a full Authentication & Access Security Center: see your account's protection status\n  at a glance, with clearer policy and enrollment options.\n* Settings has been split into focused sections (Overview, Protection, Automatic Updates, Access\n  Control, Network & GeoIP) instead of one long page.\n* Fixed a validation gap on the IP Whitelist field.",
-    "signature": "pF1HC3WkxP/cVo/Gk2R/QSOO87z6LHgGAIj3pLNQvvxl50DOSeYnNLc+3L1YJPjyh/XkjP2pxPA0QJ9l6xDfAQ=="
+    "summary": "* Hardening for the WAD remote settings added in 7.37.0: a remotely-adjusted custom login URL now\n  goes through the exact same safety checks as changing it here in wp-admin (it can no longer be\n  set to something that collides with a reserved WordPress path), and a value of the wrong type\n  for a setting is rejected instead of applied.",
+    "signature": "ugEaoL+TpncC8umJYEowzA5X8qFYlRyRVEU8Jt+6f0g0RXRErGzaWNJ3++ZD7Rry/umppR7TQhVjxAVuLOtsDg=="
 }