WebGUI

Added

• Commands from the page. A page can now run a Minecraft command, executed as the player — exactly as if they typed it in chat, so there is no privilege escalation. Commands are only accepted from the main frame of an origin the server declared trusted via trustedCommandOrigins in config/webgui/server.json; requests from any other origin (e.g. after a redirect or from an iframe) are dropped. The trusted-origin list is sent to the client on join and cleared on disconnect, so it never carries across servers.
• @webgui/react: runCommand(command) and the useRunCommand() hook.