Add docs navigation and tighten API request security

docs/gitbook/staff.md

@@ -0,0 +1,30 @@
+# Community and badges
+
+Meet other explorers, recognize the people helping the community, and make your account feel like yours.
+
+## Join Discord
+
+Use the Discord button at the bottom of MineGeo, or [join the community here](https://discord.gg/Aer4ZugKWS).
+
+Newly approved maps may be announced there. Hosts can also share open multiplayer parties to the community's party channel. Open an invite to join while there is space.
+
+## What do the name badges mean?
+
+- **Moderator, with a shield:** someone who can check maps and approve them for public play.
+- **Admin, with a crown:** someone who can also handle community reports and other site management.
+- **Bug finder:** someone recognized for helping find a confirmed bug.
+- **Custom prefix:** extra text and an icon assigned by an Admin.
+
+A decorative custom prefix does not give someone moderation powers. Copying another player's name does not copy their badges.
+
+## Can I get a glow?
+
+Support may award one for a confirmed bug report. Describe the real problem through **Report a bug**. A reward is granted by staff; it is not automatic for every report.
+
+If you have an active glow, open **Settings → Username glow**, choose a color, and save it. You can keep an earned Bug finder badge even if the glow is later removed.
+
+## Be a good party member
+
+Share invites thoughtfully, keep chat friendly, and avoid spoiling the location before everyone has guessed. Report content that needs attention instead of starting an argument.
+
+> The real treasure was the friends who also guessed the wrong mountain. ⛰️