Merge pull request #2957 from Mailaender/dedicated-bot-order-exploits

Don't misinterpret AI orders as an exploit on dedicated servers anymore.
make PaletteTexture private and only use it for sprite renders
fixes #2885 forgot to enable the cursor palette before drawing

split HardwarePalette.Update into two functions, closes #2847