Pokebuilder for Cobblemon

Root cause: The Fabric Permissions API's Permissions.check(source, node, int fallbackOpLevel) falls back to "has OP level ≥ N" when no permission provider responds. The old code passed 4 for pokebuilder.bypass.cost, which meant any OP 4 player (i.e., every server owner testing) was implicitly granted the bypass. The || short-circuit in TransactionService then skipped the
EconomyHandler.withdraw call entirely so no money ever moved.

Fix: Added PermissionHelper.hasExplicit(player, node) which calls Permissions.check(player, node, false) (boolean default =
deny) and never falls back to OP level. TransactionService now uses it for both PERM_BYPASS_COST and PERM_BYPASS_COOLDOWN. Now bypass nodes only apply when a real permissions plugin (LuckPerms, etc.) grants them.