🪸 v1.1.0 — Reef ready for the open ocean

• Author archives and the REST users route closed to subscribers and customers too: only the accounts that can write posts see them, a capability the gecka_security_enumeration_capability filter changes. An account keeps its own archive and routes.
• The journal names the account behind an enumeration refused to someone logged in.
• A scan of the author archives or of the users route is one journal row per hour, counted, instead of one row per request.
• Admin pages styled again on sites that install the plugin through their own Composer.
• The breached-password check is off until an administrator switches it on, and Site Health recommends it. Sites that never saved the settings had it on by default: switch it on again under Settings > Security.
• The breached-password warning shows on the dashboard, the profile and the screens of the plugin only.