R1 cleanup: collAnon and dead code gone, docs current, every peer's scenario in one sweep

Starts the completion program (docs/ROADMAP.md, "Owner decisions on finishing everything", 2026-10-17).

- Dead code: the commented-out collAnon blocks (discussions, seeding, admin user lists, HTTP/3, the old signature
  middleware), the empty PrivaPubWorkersConfiguration, PublicAvatarUsersService and UserPolicyType, unused helpers,
  the second IPasswordHasher registration, the PasswordGenerator package, SignUpAsync/LoginAsync's unused invitation
  parameters. "Starting PrivaPub"; a signed-in login is sent to "/", not to "/discussions".
- Stored fields nothing read: RootUser.Contacts and ResetPasswordToken*, the local Avatar.AvatarServer,
  EmailRecovery.RecoveryCode/RequestIP/CreationDate, MongoSettings.LogsDatabase, and AppConfiguration's
  upload/discussion keys, RequiresFirstTimeSetup and Version (old documents still load: MongoDB.Entities ignores extra
  elements). DmPost's indexes are no longer made. 49 collAnon keys leave FieldsNameResource in every language.
- /clientapi/data/current-version answers the build's ref. UsersIds is a list that can't throw, and the admin routes
  leave the administrator out without mutating the request.
- deploy.yml checks SecureMode on a name no persona can have, and the browser redirect on the directory's first local
  persona: @thepra is the administrator's own now.
- Town: decePub's e2e remnants (expect, client.jsonl, the decePub column) and town/tests go; the dead gaps/load
  commands too. Mobilizon no longer keeps an event for a deleted test.
- tools/pasture/sweep.sh runs every peer's scenario, batch by batch, as CLAUDE.md asks before a change to what
  PrivaPub sends.
- Docs: CLAUDE.md's repo map, route table (every frozen route) and stale lines; ROADMAP's status (setup, v1.25.0,
  v1.26.0, the program C), the 2026-10-17 decisions, and dated notes where earlier text no longer holds; FEDERATION.md's
  FEP list (7888, f228, 7628, ae0c and 8967 supported) and the deploy's persona.

Verified: dotnet build PrivaPub.sln -c Release (0 errors, no new warnings); bash -n on the touched scripts; py_compile
on the town; the pasture's gts, mastodon and lemmy scenarios on this build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof

PrivaPub/Program.cs

@@ -32,12 +32,7 @@ try
 	{
 		if (builder.Environment.IsProduction())
 		{
-			serverOptions.ListenLocalhost(6970
-			 //, options =>
-			 //{
-			 // options.Protocols = HttpProtocols.Http1AndHttp2AndHttp3;
-			 //}
-			 );
+			serverOptions.ListenLocalhost(6970);
 			serverOptions.UseSystemd();
 			serverOptions.AddServerHeader = false;
 		}
@@ -50,7 +45,6 @@ try
 	try
 	{
 		builder.Services.PrivaPubAppSettingsConfiguration(builder.Configuration)
-			.PrivaPubWorkersConfiguration()
 			.PrivaPubAuthServicesConfiguration(builder.Configuration)
 			.PrivaPubInternalizationConfiguration(builder.Configuration)
 			.PrivaPubOptimizationConfiguration()
@@ -206,9 +200,6 @@ try
 
 		app.UseAuthentication();
 		app.UseAuthorization();
-		//app.UseWhen(context => context.Request.Path.StartsWithSegments("/peasants") ||
-		//		context.Request.Path.StartsWithSegments("/users"),
-		//		app => app.UseSignatureVerification().UseDigestVerification());
 
 		app.MapGet("/build.json", () => Results.Json(new
 		{
@@ -218,7 +209,6 @@ try
 		}));
 		app.MapControllers();
 		app.MapRazorPages();
-		//app.MapFallbackToFile("index.html");
 	}
 	catch (Exception ex)
 	{
@@ -226,12 +216,11 @@ try
 		throw;
 	}
 
-	Log.ForContext<Program>().Information($"Starting collAnon at {nameof(Program)}()");
+	Log.ForContext<Program>().Information($"Starting PrivaPub at {nameof(Program)}()");
 	try
 	{
 		var dbClient = app.Services.GetService(typeof(DbEntities)) as DbEntities;
-		var passwordHasher = app.Services.GetService(typeof(IPasswordHasher)) as IPasswordHasher;
-		await dbClient.Init(passwordHasher);
+		await dbClient.Init();
 		await app.Services.GetRequiredService<PrivaPub.Federation.Moderation.IDomainBlocks>().Reload(CancellationToken.None);
 		await PrivaPub.Api.Mastodon.Auth.PersonaExchange.EnsureFirstPartyClient(app.Services, CancellationToken.None);
 	}