feat(core): implement hardening and listener resilience

[suckserberg]

Pull Request: Core Hardening and Listener Resilience

Summary

This PR implements critical security hardening and resilience features for the Satset networking engine. It protects the library from malicious client data and ensures that internal script errors in user listeners do not halt the entire networking system.

Technical Implementation

• Listener Protection: Replaced pcall with xpcall in Packet._dispatchSingle and Channel._applyUpdate. This provides error isolation, ensuring that one failing callback doesn't break other listeners.
• Initialization Guard: Added a flag to Satset.start() to prevent multiple initialization calls, which previously caused duplicate event listener stacking.
• Bounds Checking: Implemented strict validation for variable-length types (string8, string16, array, map) in src/Types/init.luau. It now verifies wire-provided length prefixes against the actual buffer size to prevent VM crashes or out-of-bounds reads.

Changelog Entry

• [Core]: Implementation of listener isolation and buffer bounds checking. Enhances library stability and prevents server crashes from malformed data.

Type of Change

• Feature
• Bug Fix
• Performance Optimization
• Documentation Update
• Maintenance / Chore

Verification and Standards

• I have adhered to the Development Patterns.
• I have verified that all CI/CD linting and formatting checks pass.
• I have confirmed the changes within a Rojo-supported environment.
• I have updated the technical documentation for any API or architectural changes.

[protheeuz]

LGTM! Nice 💯