fix(qa): health monitor SiteManager, WP plugins, favicon, download ZIPs

- Health monitor now uses SiteManager for complete site discovery
- SEO Bridge: GPLv2+ license, Tested up to 6.9, fix escaping
- OpenPanel: fix wp_unslash, reduce tags, update branding
- Add logo.svg favicon, static file serving, plugin ZIPs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

wordpress-plugin/openpanel/openpanel.php

@@ -3,11 +3,13 @@
  * Plugin Name: OpenPanel
  * Description: Activate OpenPanel to start tracking your website. Supports both Cloud and Self-Hosted instances.
  * Version: 1.1.1
- * Author: OpenPanel / Airano
+ * Plugin URI: https://github.com/airano-ir/mcphub
+ * Author: OpenPanel / MCP Hub
+ * Author URI: https://github.com/airano-ir
  * License: GPLv2 or later
  * Requires at least: 5.8
  * Requires PHP: 7.4
- * Tested up to: 6.8
+ * Tested up to: 6.9
  * Text Domain: openpanel
  */
 
@@ -479,7 +481,7 @@ final class OP_WP_Proxy {
         // Content-Type is a special header NOT prefixed with HTTP_ in PHP
         // This is critical for OpenPanel API which requires application/json
         if (!empty($_SERVER['CONTENT_TYPE'])) {
-            $headers['Content-Type'] = sanitize_text_field($_SERVER['CONTENT_TYPE']);
+            $headers['Content-Type'] = sanitize_text_field(wp_unslash($_SERVER['CONTENT_TYPE']));
         }
 
         foreach ($_SERVER as $name => $value) {

wordpress-plugin/openpanel/readme.txt

@@ -1,14 +1,14 @@
 === OpenPanel ===
 Contributors: openpanel, airano
-Tags: analytics, web analytics, privacy-friendly, tracking, proxy, self-hosted
+Tags: analytics, privacy-friendly, tracking, self-hosted, proxy
 Requires at least: 5.8
-Tested up to: 6.8
+Tested up to: 6.9
 Requires PHP: 7.4
 Stable tag: 1.1.1
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
-OpenPanel WordPress plugin - Privacy-friendly analytics with ad-blocker resistance. Supports both OpenPanel Cloud and Self-Hosted instances. Inline tracking scripts and proxy API calls through your domain.
+Privacy-friendly analytics with ad-blocker resistance. Supports OpenPanel Cloud and Self-Hosted instances.
 
 == Description ==
 

wordpress-plugin/seo-api-bridge/README.md

@@ -2,7 +2,7 @@
 
 **Version:** 1.3.0
 **Requires:** WordPress 5.0+, PHP 7.4+
-**License:** MIT
+**License:** GPLv2 or later
 
 ## Description
 
@@ -421,7 +421,7 @@ For issues related to:
 
 ## License
 
-MIT License - See LICENSE file for details
+GPLv2 or later - See [LICENSE](https://www.gnu.org/licenses/gpl-2.0.html) for details
 
 ## Credits
 

wordpress-plugin/seo-api-bridge/readme.txt

@@ -2,11 +2,11 @@
 Contributors: airano
 Tags: seo, rest-api, rank-math, yoast, mcp
 Requires at least: 5.0
-Tested up to: 6.7
+Tested up to: 6.9
 Requires PHP: 7.4
 Stable tag: 1.3.0
-License: MIT
-License URI: https://opensource.org/licenses/MIT
+License: GPLv2 or later
+License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
 Exposes Rank Math SEO and Yoast SEO meta fields via WordPress REST API for use with MCP servers and AI agents.
 

wordpress-plugin/seo-api-bridge/seo-api-bridge.php

@@ -6,7 +6,7 @@
  * Version: 1.3.0
  * Author: MCP Hub
  * Author URI: https://github.com/airano-ir
- * License: MIT
+ * License: GPL-2.0-or-later
  * Requires at least: 5.0
  * Requires PHP: 7.4
  * Text Domain: seo-api-bridge
@@ -690,8 +690,8 @@ class SEO_API_Bridge {
             $supported_types = implode(', ', $this->supported_post_types);
 
             echo '<div class="notice notice-success is-dismissible">';
-            echo '<p><strong>SEO API Bridge v' . self::VERSION . ':</strong> Successfully registered meta fields for ' . implode(' and ', $active_plugins) . '.</p>';
-            echo '<p><strong>Supported post types:</strong> ' . $supported_types . '</p>';
+            echo '<p><strong>SEO API Bridge v' . esc_html( self::VERSION ) . ':</strong> ' . esc_html( sprintf( 'Successfully registered meta fields for %s.', implode( ' and ', $active_plugins ) ) ) . '</p>';
+            echo '<p><strong>Supported post types:</strong> ' . esc_html( $supported_types ) . '</p>';
 
             if ($woocommerce_active) {
                 echo '<p><strong>WooCommerce:</strong> Detected and supported. Product SEO fields are available via REST API.</p>';