Blade 15 (RZ09-0369): Secure Boot Violation "Invalid signature" after Windows Update - db missing Windows UEFI CA 2023

Model: Razer Blade 15 Base Model (Early 2021), RZ09-0369 OS: Windows 11 Pro, Build 26300 With Secure Boot enabled, I get a red "Secure Boot Violation - Invalid signature detected" screen after the October 2026 Windows Update. With Secure Boot disabled, Windows works normally. Findings: - bootmgfw.efi is now signed by "Microsoft Windows Production PCA 2026 RSA2048-SHA256". The copy in C:\Windows\Boot\EFI has the same signer, so bcdboot cannot restore an older one. - Firmware db contains "Windows Production PCA 2011" but not "Windows UEFI CA 2023". - WindowsUEFICA2023Capable = 0, UEFICA2023Status = InProgress, UEFICA2023Error = 0. - PK, KEK and db are present; KEK has the Microsoft KEK. Questions: 1. Is there a BIOS/firmware update for RZ09-0369 that adds Windows UEFI CA 2023 to the Secure Boot db? 2. Has anyone with the same model fixed this? 3. @Razer Support team: please advise an official procedure. I have backups of PK/KEK/db/dbx and can provide them.