Catch WordPress bots without a CAPTCHA: a local-first WebDecoy rollout

Free WordPress bot detection for comment spam, fake signups and WooCommerce card testing, with WP-CLI setup and monitor-first rollout.