feat: review delete/update AP propagation, remote actor avatars, OpenAPI updates

- Send Delete activity when a review is deleted
- Send Update(Note) activity when a review is edited
- Remote actor avatars shown in followers/following pages
- OpenAPI spec updated with profile, blocked domains, blocked actor endpoints
- Fix: worker wire() call missing allow_registration argument

crates/domain/src/events.rs

@@ -33,6 +33,10 @@ pub enum DomainEvent {
     UserUpdated {
         user_id: UserId,
     },
+    ReviewDeleted {
+        review_id: ReviewId,
+        user_id: UserId,
+    },
 }
 
 #[async_trait]