ClientPolicy

Initial release.

• Channel, brand and mod loader handshake fingerprinting, buffered from login
• Wildcard signature database in signatures.yml with per-mod categories
• ALLOWLIST and BLOCKLIST profiles bound via clientpolicy.profile.
• Tiered LOG -> WARN -> KICK ladder with escalation threshold and counter reset
• Delayed first scan plus a rescan window so late channel registration cannot dodge enforcement
• /clientpolicy rules and /clientpolicy check for player-facing transparency
• /clientpolicy inspect for writing your own signatures
• SQLite audit log with /clientpolicy history and configurable retention
• Separate action for channels matching no signature