- hardened server-side cast and minigame validation
- reduced trust in client-sent power, perfect, and reel completion data
- added a per-session reel validation token
- preserved hybrid rod behavior so MinigameEnabled = false still uses simple catch + Auto
- improved SellService to support return false from transaction handlers
- improved RewardLogic asset lookup and fixed-weight/custom reward handling
- fixed rod attribute override reliability for MinigameEnabled
- improved mobile forward-cast recovery and zone raycast alignment
- fixed cinematic camera reset between fishing rounds
- updated NPC sell dialogue to stay concise and avoid confirming payment before server validation
