Fix SQL injection in Packet Index controller

Cast pktapplayer values to int via array_map before interpolating into
the SQL IN() clause, preventing injection from user-supplied GET params.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: carlbennett

src/Controllers/Packet/Index.php

@@ -42,7 +42,7 @@ public function invoke(?array $args): bool
     }
 
     $this->model->packets = \BNETDocs\Libraries\Packet\Packet::getAllPackets(
-      '`packet_application_layer_id` IN (' . implode( ',', $this->model->pktapplayer ) . ')',
+      '`packet_application_layer_id` IN (' . implode(',', array_map('intval', $this->model->pktapplayer)) . ')',
       $this->model->order
     );