fix(redis): publish INVALIDATE_PROFILE on transferClaimProfile for cross-server sync

The previous merge-branch security fix (aaad3bc) updated the local
cache + spatial index but didn't propagate the change to other
Redis-connected server instances. On a multi-server network, a market
sale on node A was invisible to node B until the next periodic cache
flush, so players on B would see the old owner.

Add INVALIDATE_PROFILE publishes for both branches:
- merge branch (buyer already has a profile): invalidate the source
  owner's profile id AND the buyer's profile id
- re-key branch (no profile yet): invalidate the old and new owner ids

A small publishInvalidate() helper makes the null check + redis call
a one-liner. unclaimAllById doesn't need this — it delegates to
abandonProfile which already publishes INVALIDATE_PROFILE.

Author: synkfr

src/main/java/org/ayosynk/landClaimPlugin/managers/ClaimManager.java

@@ -722,25 +722,39 @@ public boolean transferClaimProfile(UUID profileId, UUID newOwnerId) {
             }
             // Drop the now-empty source profile from the profile cache
             // (it's keyed by owner UUID).
-            plugin.getCacheManager().getProfileCache().invalidate(source.getOwnerId());
+            UUID sourceOwner = source.getOwnerId();
+            plugin.getCacheManager().getProfileCache().invalidate(sourceOwner);
             // Refresh the buyer entry so subsequent lookups see the new chunks.
             plugin.getCacheManager().getProfileCache().put(buyerProfile.getOwnerId(), buyerProfile);
             plugin.getDatabaseManager().getProfileDao().saveProfile(buyerProfile);
-            plugin.getDatabaseManager().getProfileDao().deleteProfile(source.getOwnerId());
+            plugin.getDatabaseManager().getProfileDao().deleteProfile(sourceOwner);
+            // Cross-server: invalidate both profiles on remote nodes so a
+            // /claimmarket sale on node A is visible immediately on node B.
+            publishInvalidate(sourceOwner);
+            publishInvalidate(buyerProfile.getOwnerId());
         } else {
             // Re-key: change ownerId in place, move cache entry.
             UUID oldOwnerId = source.getOwnerId();
             plugin.getCacheManager().getProfileCache().invalidate(oldOwnerId);
             source.setOwnerId(newOwnerId);
             plugin.getCacheManager().getProfileCache().put(newOwnerId, source);
             plugin.getDatabaseManager().getProfileDao().saveProfile(source);
+            // Cross-server: invalidate on both old and new owner IDs.
+            publishInvalidate(oldOwnerId);
+            publishInvalidate(newOwnerId);
         }
 
         plugin.getVisualizationManager().invalidateCache(newOwnerId);
         plugin.getHookManager().refreshMapHooks();
         return true;
     }
 
+    private void publishInvalidate(UUID ownerId) {
+        if (plugin.getRedisManager() != null && ownerId != null) {
+            plugin.getRedisManager().publishUpdate("INVALIDATE_PROFILE", ownerId);
+        }
+    }
+
     /**
      * Fully unclaim every chunk in a profile by its profile ID. Used
      * by addons (e.g. tax auto-unclaim) that need to wipe a claim