snapshot

Crash-safe custody under key: the original inventory, held slot, flight and return location are flushed to playerdata before the match changes anything, restored on leave, and restored on the next join after a crash. A restore that fails kicks the player and keeps the lease. Register it with registerCustody at enable.