UniversalPluginJarInspector

Validates the single ResourcePackManager artifact shared by Bukkit, Velocity, BungeeCord, and Geyser before it is installed or offered to another process.

This is deliberately independent of every platform API. Update transports can therefore use one validation policy before publishing executable bytes, while UniversalPluginJarInstaller uses the same policy before writing Geyser's extension directory.