XeroAntiCheat v1.0.8 bug fixes

- SpiderCheck: fixed Location mutation bug - bodyBlock was reading y-1 (same as feetBlock) and headBlock was reading y instead of y+1. Now uses block coordinates directly.
- ConfigManager: decay task no longer reads YamlConfiguration from background thread. decayRate is now volatile and refreshed on reload from main thread only.
- JesusCheck, SpeedCheck, NoFallCheck: loc.subtract() now uses .clone() to prevent silent Location mutation.
- VelocityCheck: decrementVelocityCheckTicks() moved past the minExpected threshold check to avoid consuming a tick on packets that are immediately discarded.

src/main/java/com/xeroth/xeroanticheat/XeroAntiCheat.java

@@ -231,6 +231,8 @@ public final class XeroAntiCheat extends JavaPlugin {
     public void reload() {
         configManager.loadConfig();
         violationManager.clearAll();
+        violationManager.setDecayRate(
+            configManager.getDouble("violation.decay_rate", 0.5));
         getLogger().info("Configuration reloaded!");
     }