fix(preview): refuse overlapping WordPress URL switches on one site
fix(extensions): swap the catalog index atomically and roll back a failed publish
fix(packaging): keep /var/lib/enconf root-owned so the API user cannot replace root-only files
style(license): US spelling in the trial comments (misspell gate)
fix(staging): serve ACME from the central webroot, repair generic staging, keep preview until WordPress is switched back, count WordPress databases against the quota
fix(license): start the trial when the trial file exists but is empty
fix(release): fail closed on incomplete uploads and empty stable index
fix(tls-health): stop listing the preview hostname as an orphan SAN
fix(extensions): cap and vet redirects on extension downloads
fix(agent): fetch upstream repo keys without a shell
fix(extensions): restrict the prestashop-toolkit socket to 0660
docs(support): rotate the remote-support key and stop naming a source IP
fix(extensions): bring all eight modules onto the patched standard library