v2.5.5 – v2.5.6 — 2026-07-04

• feat(import): rsync failure reason readable in the import instead of a JSON blob
• feat(pci): harden the 5 remaining ASV findings (clickjacking, banner, api/docs, FTP, SSH)