UniversalPluginJarPublisher

Durably copies the one universal RSPM artifact and validates the copied bytes before publishing them at their destination.

Both the Geyser installer and the proxy update pipeline use this policy so executable JAR publication cannot drift between platforms.