Stable v2.9.26

• feat(security-advisor): add one-click PHP patch action + opt-in Sury auto-patch
• fix(naming): finish netcell→enconf migration for cron jobfiles + WP mu-plugin
• feat(e2e): add site-doctor screenshot capture (expanded site row, clipped)
• fix(security-advisor): add "unknown" status for PHP branches newer than endoflife.date tracks
• fix(e2e): make screenshots.spec.ts's minted JWT password_version configurable
• fix(theme): stop the dark-sidebar active-link from reusing the a11y-darkened primary blue