Add short circuit to ensure that socket events through the API can't trigger the sands update while disabled

module/sockets/updateSands.mjs

@@ -3,6 +3,7 @@ import { localizer } from "../utils/Localizer.mjs";
 
 export function updateSands(payload) {
 	if (!game.user.isActiveGM) { return };
+	if (!game.settings.get(game.system.id, `allowUpdateSandsSocket`)) { return };
 
 	// Assert payload validity
 	const { value, delta } = payload;