WeSCANZ/SCANZ-BOT

AI Summary: The `/setup_reaction_role` command in `cogs/reaction_roles.py` has a security vulnerability as it lacks explicit permission restrictions. This allows any user to create reaction-role messages and assign roles the bot can assign, contrary to the expected behavior of requiring administrator or "Manage Roles" permissions. The suggested fix is to add `@app_commands.default_permissions(administrator=True)` or a similar decorator to the command.