R6 moderation: roles, silence and suspension, bans that write nothing on the personas, deletions, report actions

Roles (user, moderator, administrator) from the CLI and /clientapi/admin/roots/{id}/role, never one's own nor the last
administrator. Silence keeps an account's posts out of public timelines, hashtags, trends, search and relays while its
followers still get them; suspension refuses and revokes a local persona's tokens, answers 404 for its posts and
collections, holds back every delivery and tells other servers nothing new, its actor unchanged; a suspended remote
account's activities are dropped and nothing goes to its own inbox (a shared one still serves its server). A banned
login's personas are held back in memory alone (Restrictions), so nothing pairs them in stored data. Personas and groups
are deleted one at a time (PersonaRemoval, GroupRemoval), by their login or an administrator with the password. Reports
resolve with an action and a note; posts are taken down, a remote copy hidden. Warnings reach the persona as Mastodon's
moderation_warning. Every staff act goes to the staff's log. Migration _020 limits posts from servers already silenced;
a restore keeps the moderation made since the backup.

Verified: interop.sh moderation gts mastodon with SecureMode, 194 passed; restore.sh, 25 passed, now with a suspension,
a silence and a takedown made after the backup.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof

PrivaPub/Models/Post/Post.cs

@@ -59,6 +59,14 @@ namespace PrivaPub.Models.Post
 		public bool HasContentWarning { get; set; } = false;
 		public bool IsLocalOnly { get; set; }
 		public bool AuthorGone { get; set; }//its remote author deleted their account: kept, but hidden everywhere (VisibilityPolicy)
+		// the staff's moderation (completion program R6, Domain/Moderation/AccountModeration.cs), copied from the author so a
+		// query needs no join: suspended, it is hidden everywhere as AuthorGone is (until the suspension is lifted); limited
+		// (the author or its server silenced), it stays out of the public and hashtag timelines, trends, search and the
+		// relays, and its followers still get it. A banned login's personas are never flagged (that would pair them):
+		// Restrictions treats them as suspended when posts are read.
+		public bool AuthorSuspended { get; set; }
+		public bool AuthorLimited { get; set; }
+		public DateTime? ModeratedAt { get; set; }//a remote copy the staff took down: kept, hidden everywhere, never fetched again
 
 		public bool IsFederatedCopy { get; set; }
 		public string ObjectURI { get; set; }//the Note's id