chore(security): harden config, command guardrails, parsing, and logging

[JARVIS-AT-ROOTCAUSED]

Security hardening follow-ups

This PR applies each review item as an isolated commit for easy review/cherry-pick.

Commits

1. build(security): remove developer-local Maven repository override

   • removes non-portable file:/Users/.../.m2 repository from pom.xml

2. fix(realestate): add view cooldown and world allowlist guardrails

   • adds /realestate view cooldown controls
   • adds world allowlist support via RealEstate/config.yml
   • adds realestate.bypasscooldown permission

3. refactor(realestate): tighten reflection exception handling and add warnings

   • narrows broad throwable catch paths
   • logs Towny reflection failures for observability

4. fix(filehandler): harden morality data parsing against malformed lines

   • validates parse shape and catches invalid UUID/int values
   • skips malformed rows instead of hard-failing load

5. chore(logging): remove noisy per-request placeholder logs

   • removes placeholder request spam from logs
   • keeps functional placeholder behavior unchanged