v1.4.0 — theme install-from-url + SHA-256 verification - POST /themes/install-from-url install + activate a theme ZIP (e.g. Kadence) - theme_switch rollback case theme activation is reversible - download_verified() helper SHA-256 trust boundary for premium artifacts - /plugins/install* optional sha256 verify premium ZIPs before install Closes the onboarding gap for customers with no WordPress site.