Fix bugs and security issues (backward compatible)

[Adriapp]

This PR collects a set of backward-compatible bug fixes and security hardenings for the framework. Existing bots keep working without any change to their code or configuration.

🔴 Functional bugs (cause fatal errors)

• VariablesMaker::parseMessage called parsePassport(), but the method is named parsePassportData(). Any message containing Telegram Passport data triggered a fatal "Call to undefined method". Fixed the call.
• BotAPI::__call threw \neneone\neneone\Exception (a non-existent namespace), so calling an unknown API method produced a "class not found" fatal error instead of the intended exception. Fixed to \neneone\SnapeBot\Exception.
• BotAPI getMe entry in the methods list was a copy of sendMessage's parameters (chat_id/text as required), generating PHP warnings on every startup. Set to [].

🟠 Security

• SQL injection on identifiers: the table name and the setPage() $field argument were concatenated directly into queries (PDO can't bind identifiers). Added a [A-Za-z0-9_] whitelist that throws on invalid values. Values (userID, name, …) were already bound — only identifiers were affected.
• Callback data encryption:
  • specialEncrypt() now uses a random IV per encryption (prepended to the ciphertext) instead of a fixed, deterministic IV. specialDecrypt() is fully backward compatible: data produced by older versions (fixed-IV format) is still decrypted correctly, so buttons already in the wild keep working.
  • Added a warning (E_USER_WARNING) when cbDataEncryption is enabled while the default key/iv (publicly known from the repo) are still in use.
• PDO connection: added charset=utf8mb4 (fixes emoji in names) and ERRMODE_EXCEPTION so DB errors surface instead of failing silently on PHP 7.

🟡 Minor / consistency

• SnapeBot::buildSettings now initializes $builtSettings (avoids a notice with an empty scheme).
• Fixed namespace casing in the BotAPI instantiation (snapeBot → SnapeBot).
• composer.json: license aligned with the actual LICENSE file (GPL-3.0-or-later instead of AGPL-3.0-only); minimum-stability set to stable.

Notes — intentionally left untouched (to discuss)

These were spotted but not changed to avoid altering runtime behavior; happy to address them if you prefer:

1. firstRun defaults to true, so CREATE TABLE IF NOT EXISTS runs on every webhook call (performance only).
2. In the constructor, !isset($this->settings['botUsername']) is always false after buildSettings. Making it actually fire would add a mandatory getMe network call, which could break offline/testing setups.
3. msg / username are not HTML-escaped (unlike firstName/title). It's the developer's responsibility, and escaping here could cause double-escaping.

All five changed PHP files pass php -l, and composer.json is valid JSON. Marked as draft for review before merging.