wp-hardening

Safely harden a WordPress site — "lock the doors so it doesn't happen again." Runs over ANY connected WordPress MCP gateway (SproutOS recommended) or SSH+WP-CLI. Applies idempotent, reversible hardening: disable the file editor, turn off debug output, rotate salts, block PHP execution in uploads, disable directory listing, add non-breaking security headers, cap revisions, enable minor auto-updates — and, with…