Plan for Cookie Bot Protection 1.0.11

This issue tracks the bugs and security improvements planned for the 1.0.1 release. All items are corrections with no new dependencies and no visible behavior change for end users. No new features are included; those are deferred to a future release.

Each item will be tracked in its own issue and linked here.

• #3595565: Add regex validation in the settings form to prevent PHP errors on invalid patterns
• #3595583: Fix wrong default value for header_response_debug checkbox
• #3595593: Fix Drupal-CBP-Request-Headers debug header showing wrong hash payload
• #3595622: Replace |= operator and remove unused $matches variable in pattern matching methods