✅ Every YAML file: valid yaml-lint output
✅ Every bash script: starts with #!/bin/bash and set -euo pipefail
✅ Every config file: Romanian comment above each non-trivial setting
✅ No hardcoded passwords, tokens, IPs, or Discord IDs
✅ Placeholder format: PLACEHOLDER_DESCRIPTIVE_NAME (uppercase + underscore)
✅ docker-compose.yml: Ports 8123 and 25575 NOT in the ports section
✅ .env.example: every variable has an inline comment explaining it
✅ All shell scripts: executable permissions (chmod +x)

Step 1: docker-compose.yml + .env.example + .gitignore
Step 2: server.properties + config/*.yml
Step 3: plugin-configs/ — in dependency order:
         luckperms → essentialsx → towny → aureliumskills
         → shopgui → quests → mythicmobs → discordsrv → dynmap
Step 4: scripts/ — setup.sh first, then others
Step 5: plugins/DOWNLOAD_LIST.md
Step 6: CHECKLIST.md
Step 7: Validate with commands below

# 1. Docker Compose syntax
docker compose config

# 2. Dry run
docker compose up --dry-run

# 3. File count
ls -R plugin-configs/ | wc -l   # must be ≥ 23

# 4. Security check — must return nothing
grep -r 'RCON_PASSWORD\|TOKEN\|SECRET' docker-compose.yml

# 5. Gitignore check
grep '.env' .gitignore

# 6. Scripts executable
ls -la scripts/*.sh   # must show -rwxr-xr-x