Security audit: review plugin code and repo hardening

[TheMeinerLP]

User story

As a project owner, I want a security review of the Bukkit plugin code and repository configuration so that risks are identified and mitigated before release.

Scope

• Commands, listeners, and services (input validation, permissions, config access)
• Configuration handling (config.yml and zone keys)
• Build and CI workflows (supply-chain and release safety)
• Dependency versions and update practices

Acceptance criteria

• Validate all user input and zone identifiers consistently.
• Confirm permissions are enforced for all commands.
• Identify any unsafe reflection, dynamic loading, or unsafe config access patterns.
• Document findings and recommended fixes.
• Update documentation if workflow or security guidance changes.

Estimate

• Planning-poker: S (2 points)