Release PWMenu 1.3.9: faster UI and reliable capture validation

[newfpv]

Summary

Prepare PWMenu 1.3.9 with faster Raspberry Pi Web UI responses, strict local capture suitability checks, reliable manual password verification, immediate map-state updates, and detailed documentation.

Changes

• Cache the large Jinja template and avoid unchanged state-file rewrites during page views.
• Use configurable Raspberry-friendly gzip compression (web_gzip_level, default 1).
• Add configurable notification/toast duration (web_notification_duration_ms).
• Remove duplicate singleton map payloads.
• Verify PMKID-only captures locally with hcxpcapngtool + PBKDF2-HMAC-SHA1 and constant-time comparison.
• Keep aircrack-ng verification for EAPOL captures and never save unverified manual passwords.
• Explain explicitly when a password cannot be checked because no usable WPA/PMKID hash exists.
• Add zero-hash Partial captures to confirmation-bound Capture Cleanup.
• Require successful local mode 22000 extraction before OHC queueing and return the exact exclusion reason when nothing is queued.
• Update the Handshakes MAP badge and Move action immediately after manual placement.
• Expand README and CHANGELOG with quality meanings, Hashcat suitability, Cleanup safety, OHC filtering, configuration, and release details.

Validation

• python -m unittest discover -s tests -v
• 59 tests passed.
• Wiki HTML parsed successfully with no duplicate IDs or missing internal anchor targets.
• Measured repeated compressed Web UI responses on the development Pwnagotchi at approximately 1.3–1.6 seconds, down from roughly 6 seconds before these changes.

For authorized auditing of networks owned by the operator.