Summary

• Hardening: wp_delete_post cap check now runs before existence lookup (no longer leaks existence to non-deleters); wp_get_post_meta requires edit_post for underscore-prefixed protected keys, mirroring WP core's is_protected_meta() convention.
• Hardening: wp_update_post / wp_update_page / wp_update_media / wp_update_term treat empty-string text fields as "preserve existing" rather than "blank the field." Defends against AI drivers that template-fill optional text args with empty strings.
• Ergonomics: Every post-identifying tool now accepts either id or post_id. Handler-level acceptance only; no schema changes; existing callers unchanged.
• UX: Founders Bundle banner switched to version-stamped dismissal (re-appears once per plugin version update). New wp.org review-request banner at the top of the settings page, same version-stamped pattern.