Update signed manifest to 7.41.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.28.5",
-    "released_at": "2026-09-02T16:09:39+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.28.5/argus-wordpress-defence-7.28.5.zip",
-    "sha256": "f5574faa92ef31247d15f462d67bf7743b3e22b7c3e24fac4e0ccb80708ded38",
+    "version": "7.41.0",
+    "released_at": "2026-09-17T11:36:03+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.41.0/argus-wordpress-defence-7.41.0.zip",
+    "sha256": "311dacbd64a9604dba16de4329203899dd5a85aac0f0e78ea5670e2123069958",
     "min_php": "7.4",
     "min_wp": "6.0",
-    "critical": true,
-    "summary": "* Fixed a serious bug where the firewall could block a real visitor (including search engines\n  like Google) on sites using certain page-builder widgets, showing them a \"Forbidden\" page\n  instead of your content -- and could go on to ban their IP address, keeping them locked out.\n* The firewall no longer bans a visitor's IP address after a single suspicious-looking request --\n  it still blocks that one request immediately as before, but only bans the IP once a real\n  pattern of repeated or combined attack behavior is seen. Genuine attacks are still detected and\n  blocked exactly as before; this only prevents an isolated false alarm from locking someone out.",
-    "signature": "tkLviBtuKf9NjiCMOAyLyc3mUH+hvI7zy9CV4B4qUdmkz0m8CqPzYqqIrUxEtL4GFgTtmLMZA1T3w/I1O1CLCg=="
+    "critical": false,
+    "summary": "* Findings now have a complete lifecycle: Resolve, Reopen, Accept Risk, False Positive/Suppress,\n  Archive and Restore are all real, tracked actions (who did it, when, and why), available here in\n  wp-admin and, if this site is connected to a WAD account, from there too -- WAD is never a\n  separate copy of this data, every action there is carried out on this site the same way.\n* Contact Form 7's public feedback submission endpoint is now correctly recognised as an\n  intentional, documented part of that plugin's own public API, the same way WooCommerce's Store\n  API and Jetpack's public endpoints already were -- it no longer creates an unnecessary finding.",
+    "signature": "ebCSGFVp8NzohM7F8+os2MaNT67iyaYxNaxeKSrj+utKUL3qF30VF7qy69wvyBicttrKvtlqcbzhl53QBlMRCQ=="
 }