Fix player fact loss on server switch, add MongoDB auth, make reload safe

[Chikage04]

Summary

Three fixes around the MongoDB-backed fact persistence layer on a network.

1. Stop player fact loss when switching servers (5857a00)

• reconcileGroup keyed its delete-missing on the persistable subset of the cache, so any fact whose entry isn't defined/loaded on the current server was wiped from the shared DB ("Loaded 10 → Synced 2 → lost 8"). Deletion is now keyed on cache presence — only facts the player genuinely no longer has are removed, never ones this server merely can't persist.
• The periodic async flush could run after a player was evicted on quit, observe an empty cache and deleteMany() every fact. Flushes are now gated on per-player ownership and serialised with a striped lock, so an evicted/never-loaded player is never reconciled.

2. Support separate MongoDB credentials (0a608af)

username / password / auth_source config keys were silently ignored (only uri/name were read) → a secured MongoDB rejected everything with "Command find requires authentication" (error 13). The client is now built from MongoClientSettings with an optional MongoCredential (auth_source defaults to the database name, so the password no longer has to be URL-encoded into the URI; an explicit credential overrides one embedded in the URI). The previously-unused timeout_ms is applied as the server-selection timeout, and the default config.yml documents the new keys.

3. Keep the Mongo connection open across runtime reloads (08dadad)

Typewriter resolves Inkwell's FactStorage once via by lazy at its own startup and caches it (FactDatabase.storage), so closing the MongoClient on a PlugMan//reload left that binding on a dead connection → "Mongo storeFacts failed: state should be: open". onDisable no longer closes the client or unloads the Koin module on a runtime disable — it still flushes online players' facts first, so nothing is lost. Because the binding is cached, a full server restart is needed to re-point Typewriter's hook; the README's reload note documents this.

Testing

• ./gradlew shadowJar builds cleanly.
• New regression tests: a Docker-free MockK test for the eviction race, plus Testcontainers tests for presence-based reconciliation. The Testcontainers suite requires Docker (not run in this environment).

🤖 Generated with Claude Code