Function parseDebugFlags

Parse a URL query string (with or without leading ?) for a debug param.

• ?debug=hitboxes → { hitboxes: true }
• ?debug=bounds,origins → { bounds: true, origins: true }
• ?debug=all → every feature enabled
• missing/empty/unknown-only → null