R6 moderation: roles, silence and suspension, bans that write nothing on the personas, deletions, report actions

Roles (user, moderator, administrator) from the CLI and /clientapi/admin/roots/{id}/role, never one's own nor the last
administrator. Silence keeps an account's posts out of public timelines, hashtags, trends, search and relays while its
followers still get them; suspension refuses and revokes a local persona's tokens, answers 404 for its posts and
collections, holds back every delivery and tells other servers nothing new, its actor unchanged; a suspended remote
account's activities are dropped and nothing goes to its own inbox (a shared one still serves its server). A banned
login's personas are held back in memory alone (Restrictions), so nothing pairs them in stored data. Personas and groups
are deleted one at a time (PersonaRemoval, GroupRemoval), by their login or an administrator with the password. Reports
resolve with an action and a note; posts are taken down, a remote copy hidden. Warnings reach the persona as Mastodon's
moderation_warning. Every staff act goes to the staff's log. Migration _020 limits posts from servers already silenced;
a restore keeps the moderation made since the backup.

Verified: interop.sh moderation gts mastodon with SecureMode, 194 passed; restore.sh, 25 passed, now with a suspension,
a silence and a takedown made after the backup.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof

PrivaPub/Domain/Statuses/ScheduledStatuses.cs

@@ -105,6 +105,11 @@ namespace PrivaPub.Domain.Statuses
 			if (scheduled == default || scheduled.ScheduledAt > DateTime.UtcNow.AddSeconds(30))
 				return JobOutcome.Done;//dropped, or moved to a later time that has its own job
 			using var scope = _scopes.CreateScope();
+			// a persona suspended since, or whose login was banned, waits: lifting it publishes what came due meanwhile
+			// (R6), unless that was a month ago
+			if (Moderation.Restrictions.IsSuspended(scheduled.AvatarId) && scheduled.ScheduledAt > DateTime.UtcNow.AddDays(-30)
+				&& await DB.Default.Find<Avatar>().Match(a => a.ID == scheduled.AvatarId && !a.DeletionAt.HasValue).ExecuteAnyAsync(token))
+				return JobOutcome.Defer(DateTime.UtcNow.AddHours(1), "its author is suspended");
 			// a persona deleted or banned since it was scheduled publishes nothing, and what it held is trashed
 			if (!await ScheduledStatuses.MayPublish(scheduled.AvatarId, token))
 			{

PrivaPub/Domain/Statuses/StatusService.cs

@@ -203,6 +203,7 @@ namespace PrivaPub.Domain.Statuses
 			{
 				GroupUserId = author.Id,
 				AuthorAccountId = author.Id,
+				AuthorLimited = author.Silenced,//a silenced persona's posts stay out of the public timelines (R6)
 				GroupId = group?.Id,
 				Visibility = visibility,
 				Title = Clean(draft.Title),
@@ -621,6 +622,7 @@ namespace PrivaPub.Domain.Statuses
 					ID = reblogId,
 					GroupUserId = me.Id,
 					AuthorAccountId = me.Id,
+					AuthorLimited = me.Silenced,
 					ReblogOfPostId = original.ID,
 					Visibility = visibility == PostVisibility.Unlisted ? PostVisibility.Unlisted : PostVisibility.Public,
 					ObjectURI = announceId,