Remove third-party branded cloaks from the allowlist

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>

src/cosmetics.rs

@@ -5,13 +5,7 @@ use crate::{types::UUID, user};
 
 pub const CLOAKS: &[&str] = &[
     "glitch",
-    "mercedes_flow",
     "crimson_mark",
-    "bmw",
-    "amg",
-    "amg_petronas",
-    "ferrari",
-    "redbull",
     "black_hole_amethyst",
     "black_hole_flame",
     "black_hole_white",
@@ -29,7 +23,7 @@ pub const HATS: &[&str] = &[
     "horns_end",
     "halo_end",
     "bucket_black",
-    "bucket_end"
+    "bucket_end",
 ];
 
 pub enum CosmeticKind {