Stable v2.9.29

• docs: regenerate testing changelog index
• docs: add WAF to the pending What's New buffer
• feat(waf): deep-link from the site toggle into the WAF settings page
• fix(waf): load per-site exclusions before global CRS to fix Detection-Only