Update signed manifest to 7.39.9

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.29.2",
-    "released_at": "2026-09-14T09:33:45+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.29.2/argus-wordpress-defence-7.29.2.zip",
-    "sha256": "1d5298ce27eaf2ed6f0290a708e652abbd28e5e4d474f196e1ecb4ea8ff6ae1b",
+    "version": "7.39.9",
+    "released_at": "2026-09-16T22:55:42+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.39.9/argus-wordpress-defence-7.39.9.zip",
+    "sha256": "71bd5210209f88690b9e6f1c907b5003d3ad2d71b16725a063953d73a68cd654",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Fixed a bug where the Scanner's very first check of your site (or one run after resetting it)\n  could flag every core WordPress file as suspicious at once, dropping your Security Score to 0\n  for no real reason. A first-time check now quietly learns what your site looks like, exactly\n  like every check after it, and only flags files that are genuinely new or changed.",
-    "signature": "gkSLRMxz9Gzzq5Aon9HLOvrf12jLkJ/ygWvG8ud+BSBgsA6DImiVbvTeZtnXd1jM4EJBvuLE9s9006rxy89zBA=="
+    "summary": "* Security hardening: disconnecting this site from WAD (or uninstalling the plugin) now also\n  invalidates its connection secret on WAD's side, not just locally -- previously the secret stayed\n  valid indefinitely. This site also now detects if a WAD account disconnects it remotely and shows\n  a clear notice instead of retrying silently.",
+    "signature": "wmURSl7ERPhNLEAamavc92ln0Dx4gZVJoTjDLQQKoEkqr6Q3UU4p2zblyaACiUOf3DLK6DlJDMi6PScZISJ7Dw=="
 }