xp.VAR_TOP_GROUP stores the GROUP object ID when the top attacker is in
a group, not an individual player. The isPlayer() guard in addRareLoot()
was then failing immediately, preventing any RLS chest from spawning
whenever players were grouped.
Pick a random member of the group as the RLS recipient, consistent with
how other group loot mechanics work in the codebase.
Fixes#343