Anti Cheat

- Reworked movement anti-cheat logic: Speed/Fly/NoClip detections are now more stable and less sensitive to single-tick position spikes
- Introduced a proper Violation Level (VL) buffering model with gradual decay to reduce lag-related false positives
- Improved Speed detection: fixed cases where it behaved inconsistently; increased setback frequency and made enforcement more predictable
- Improved Fly detection: stabilized player state tracking (air/position-related), reducing false positives
- Fixed a critical issue: players should no longer get kicked when entering portals/instances due to false Speed/NoClip/Fly detections
- Added reliable world/instance transition handling and a full anti-cheat state reset on world change (VLs, cooldowns, setback counters, pending actions, tracked positions)
- Added an extended grace period on world/instance transitions to prevent detections while the instance is loading
- Improved teleport handling: anti-cheat properly suppresses checks during Teleport and PendingTeleport states to avoid punishing legitimate moves
- Added safety checks to skip detection/enforcement when the player has an invalid chunk reference or the chunk is not ready (common during instance entry)
- Added a hard rule: no kick/setback is applied while in grace; pending punishments are cleared to prevent “delayed” enforcement right after loading
- Moved kick/punishment execution to a safe deferred path to avoid ECS/Store processing exceptions and potential server crashes
- Fixed compilation errors and broken sections in movement systems caused by earlier edits
- Updated tuning defaults: Speed setbacks can be unlimited if desired and trigger more frequently (lower cooldown)
- Improved alerts: detection/enforcement notifications are clearer and more useful during testing
- Strengthened state resets on player rejoin to prevent old violations/position tracking from carrying over

- Added Identity configuration support for secure/insecure authentication rules, duplicate username prevention, and optional insecure username-to-UUID allowlist bindings