AuraEssentials

# AUTHENTICATION (new)
+ auth.mode: DIALOG — native pre-spawn UI, before the player enters the world
+ auth.mode: CHAT — /login and /register (fallback; forced when bedrock.mode=proxy)
+ auth.hideChatCommands: true — hides auth commands from chat and autocomplete
+ dialog: maxAttempts 3, sessionTtl 2h, welcomeTtl 15min, packTimeout 60s
+ no more vanilla "Waiting for server" screen: uses CLOSE, no countdown

# PREMIUM x CRACKED (new)
+ premium detected via Netty handshake (channel injection), no external plugin
+ premium joins straight in with the Mojang UUID; cracked keeps login/password
+ cracked account using a premium nick is blocked
+ session cache 7 days — no Mojang lookup on every login
+ configurable handshake timeout (auth.premium.timeoutMs, 3000ms)
+ hashed cookie

# UUID MIGRATION (new)
+ migrates on its own on the first boot, BEFORE the managers load
+ pairing (offline -> Mojang) detected by nick: auth.yml + usercache.json
+ rewrites the ymls and moves player data (inventory, EC, XP, position, advancements, stats)
+ verified backup before any mutation + MANIFEST with rollback
+ runs ONCE (done flag); after that only via /aurauuids
+ /aurauuids: scan | apply | status | purge | migrar
+ forced UUID->UUID migration for conflicts or moving data between accounts
+ gate: blocks premium login while old data is still unmigrated

# PERMISSIONS AND OTHERS
+ permission nodes in English, with the old (pt) ones kept as legacy aliases:
+   quicklogin/rapidologin, mobstick/graveto, claim/terreno, link/vincular, clan/cla
+ anti-dupe: Ender Chest, crates and shops
+ Clan Ender Chest: warns when it is already in use by another member

- pack prompt: "&ePack do servidor necessario para ver os glyphs oficiais."
+ pack prompt: "AuraEssentials"
- permission descriptions in Portuguese (became legacy aliases)