ResourcePackServer

fix: use is_relative_to() for path traversal check to avoid prefix collision

fix: address code review issues across security, performance, and correctness

fix: optimize code

fix: hardcoded version, import in loop, uncached SHA1

fix: format code with ruff