protocol/unreal: fix checking of +f syntax

check_flood would immediately return false regardless of action char
validity, and check_flood_old was expecting a ':' but actually checked
for '*'.

ref: atheme/atheme@3f45f52
nickserv/{enforce,ghost}: respect frozen accounts

This further avoids allowing access of frozen accounts, most critically
in the case of the NickServ REGAIN command which would otherwise allow
logging in to a frozen account.

ref: shalture/shalture@5f8c65a