v2.9.0

Added

• WordPressVIPMinimum.Security.ExitAfterRedirect (error): flags
  wp_redirect() and wp_safe_redirect() calls not followed by
  exit(), preventing unintended output or side effects after
  headers are sent — a known WordPress footgun, especially in
  admin_post_* handlers. Pulled from automattic/vipwpcs
  (cherry-picked; the full VIP ruleset is not included).
  Closes #103.