v2026.07.26.03 — 2026-07-26

• feat(wordpress): local Wordfence CVE feed for the WP toolkit (key-free, privacy-first)