[BUG] User can set win without starting match

[marcobrunodev]

Describe the Bug

Any user can set themselves as the match winner, even without starting it. Missing match state validation and permission checks

[lukepolo]

this may be required, may limit this to match organizers though