feat: review delete/update AP propagation, remote actor avatars, OpenAPI updates

- Send Delete activity when a review is deleted
- Send Update(Note) activity when a review is edited
- Remote actor avatars shown in followers/following pages
- OpenAPI spec updated with profile, blocked domains, blocked actor endpoints
- Fix: worker wire() call missing allow_registration argument

crates/application/src/ports.rs

@@ -9,6 +9,7 @@ pub struct RemoteActorView {
     pub handle: String,
     pub display_name: Option<String>,
     pub url: String,
+    pub avatar_url: Option<String>,
 }
 
 pub struct HtmlPageContext {