Update signed manifest to 7.41.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.37.1",
-    "released_at": "2026-09-15T16:45:42+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.37.1/argus-wordpress-defence-7.37.1.zip",
-    "sha256": "daa33299e82da0d1ae6af271b9f6795f57e7ee11fe034b34e1ebc5ad6478daae",
+    "version": "7.41.0",
+    "released_at": "2026-09-17T11:36:03+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.41.0/argus-wordpress-defence-7.41.0.zip",
+    "sha256": "311dacbd64a9604dba16de4329203899dd5a85aac0f0e78ea5670e2123069958",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Hardening for the WAD remote settings added in 7.37.0: a remotely-adjusted custom login URL now\n  goes through the exact same safety checks as changing it here in wp-admin (it can no longer be\n  set to something that collides with a reserved WordPress path), and a value of the wrong type\n  for a setting is rejected instead of applied.",
-    "signature": "ugEaoL+TpncC8umJYEowzA5X8qFYlRyRVEU8Jt+6f0g0RXRErGzaWNJ3++ZD7Rry/umppR7TQhVjxAVuLOtsDg=="
+    "summary": "* Findings now have a complete lifecycle: Resolve, Reopen, Accept Risk, False Positive/Suppress,\n  Archive and Restore are all real, tracked actions (who did it, when, and why), available here in\n  wp-admin and, if this site is connected to a WAD account, from there too -- WAD is never a\n  separate copy of this data, every action there is carried out on this site the same way.\n* Contact Form 7's public feedback submission endpoint is now correctly recognised as an\n  intentional, documented part of that plugin's own public API, the same way WooCommerce's Store\n  API and Jetpack's public endpoints already were -- it no longer creates an unnecessary finding.",
+    "signature": "ebCSGFVp8NzohM7F8+os2MaNT67iyaYxNaxeKSrj+utKUL3qF30VF7qy69wvyBicttrKvtlqcbzhl53QBlMRCQ=="
 }