WP MCP 0.8.104: Incident response

WP MCP 0.8.104 is out. Here is what changed in this release:

• New: incident response. incident-response lists and revokes application passwords (never showing secrets), ends login sessions for one user or everyone, rotates the keys and salts in wp-config.php with a backup, and reinstalls core files the security scan flags from the checksum-verified official package, undoable with rollback-operation.
• Every incident-response write needs confirm:true and is recorded in the audit log. Your own session and application password are kept unless you ask, and salt rotation refuses when wp-config.php is not writable or the salts are defined elsewhere.

Download it from the GitHub release, or see this release on the changelog alongside every earlier one.