WordPress malware cleanup

A practical recovery runbook for hacked WordPress sites: contain damage, preserve evidence, clean malware, restore safely, and prevent repeat compromise.