fix: patch authentication bypass and input validation in server callbacks

[peleg-development]

Severity	Exploit	File:Line	What an executor can do	Fixed
CRIT	selfRegisterWeapon	weapons.lua:427	Register weapons under ANY citizen's name, flood DB with fake weapons. No auth at all.	✅
CRIT	processFine / giveCitation	charges.lua:42 / sentencing.lua:72	Send NaN as fine amount — bypasses <= 0 check, duplicates money via removeMoney(NaN)	✅
HIGH	updatePermissionRole	management.lua:221	Grade-0 officer grants themselves all permissions, full admin escalation	✅
HIGH	uploadSuspectPhoto	fivemanage.lua:143	Any civilian changes any citizen's profile picture. No auth at all.	✅
HIGH	openEvidenceStash	evidence.lua:503	Open ANY stash by ID — steal evidence, contraband, items from any locker	✅
MED	issueWarrant	warrants.lua:85	Issue warrants without permission	✅
MED	closeWarrant	warrants.lua:123	Close warrants without permission	✅
MED	giveCitation	sentencing.lua:55	Deduct money from players without permission	✅
MED	sendToJail	sentencing.lua:6	Jail any player, unlimited sentence, no permission	✅
MED	impoundVehicle / releaseImpound	impound.lua:4,53	Impound/release any vehicle without permission	✅
MED	createStaticCamera / deleteCamera	cameras.lua:618,832	Spam cameras or delete any camera without permission	✅
LOW	processFine cooldown	charges.lua:35	Global boolean blocks ALL officers when one processes a fine	✅