RogueRust v4.4.57

4.4.57 — Signed updates, single version source, fixes and performance

• Updater: the release public key is now built into the DLL and a valid manifest signature is required before an update is installed. Unsigned or wrongly signed releases are refused.
• Versioning: the version is declared once, in the VERSION file. Project metadata, assembly attributes, RogueRustExtension.InformationalVersion/CurrentVersion, the Windows tooling and both GitHub workflows read it from there; nothing rewrites source files any more.
• Fix: RogueTopologyService road, river and rail masks now match Rust's TerrainTopology values.
• Fix: the MySQL provider resolves MySqlConnector from Oxide.MySql.dll.
• Fix: unregistering a database (including on plugin unload) no longer closes a SQLite handle or disposes a gate under a running operation.
• Fix: only transient SQLite errors are retried and counted against the circuit breaker.
• Fix: plugin unload now removes network subscriptions and pending image callbacks.
• Fix: command arguments are validated before the cooldown starts; server console and RCON can run permissioned commands.
• Fix: a repeating or cron job that throws keeps its schedule, and job failures are logged.
• Change: RogueRustPlugin cache and cooldown helpers prefix keys with the plugin name.
• Performance: terrain, topology, world-size and entity queries call the game API directly instead of through reflection; pathfinding uses a binary heap; UI callback expiry sweeps are throttled and CUI calls use cached delegates; PNG validation uses a table-driven CRC; expired cache entries are swept every minute.
• Performance: SaveDataDebounced serializes on the game thread and writes on a worker thread; asset-store database writes are queued instead of blocking the caller; ImageLibrary downloads up to three images at once with one decode per frame.
• Tooling: RogueRust-Windows.cmd no longer defaults to version 4.4.0, and its Protected build action works again.
• Publishing: the public release now contains only the signed protected DLL, its signed manifest and SHA256SUMS.txt, and is refused unless the signature verifies. The release page shows only that version's changelog section; the full CHANGELOG.md is updated on the public repository for stable releases.