feat(ap): ActivityPub spec compliance and profile completeness

Phase 1 — spec compliance:
- Add AS_PUBLIC constant; add to/cc fields to CreateActivity, DeleteActivity,
  UpdateActivity, AddActivity; populate on all broadcast call sites
- Add @context to outbox CreateActivity items
- Set manuallyApprovesFollowers: true to match actual Pending follow flow
- Gate PermissiveVerifier behind FEDERATION_DEBUG env var
- Add updated timestamp to Person actor JSON
- Improve actor update delivery logging

Phase 2a Batch 1 — AP layer:
- Add /inbox shared inbox route; add endpoints.sharedInbox to Person
- Paginate followers and following collections (20/page, OrderedCollectionPage)

Phase 2a Batch 2 — profile completeness:
- DB migrations: banner_path, also_known_as columns; user_profile_fields table
- ProfileField value object; UserProfileFieldsRepository port
- Banner image upload (stored via image-converter, surfaced as image in Person)
- alsoKnownAs field in Person (account migration support)
- Custom profile fields (up to 4 PropertyValue attachments in Person)
- Profile settings UI: banner preview/upload, alsoKnownAs input, fields form
- PUT /api/v1/profile/fields API endpoint

crates/worker/src/db.rs

@@ -4,7 +4,8 @@ use anyhow::Context;
 use domain::ports::{
     DiaryRepository, ImageRefCommand, ImageRefQuery, ImportProfileRepository,
     ImportSessionRepository, MovieProfileRepository, MovieRepository, PersonCommand, PersonQuery,
-    ReviewRepository, SearchCommand, SearchPort, StatsRepository, UserRepository, WatchlistRepository,
+    ReviewRepository, SearchCommand, SearchPort, StatsRepository, UserProfileFieldsRepository,
+    UserRepository, WatchlistRepository,
 };
 
 pub enum DbPool {
@@ -30,6 +31,7 @@ pub struct Repos {
     pub person_query:      Arc<dyn PersonQuery>,
     pub search_command:    Arc<dyn SearchCommand>,
     pub search_port:       Arc<dyn SearchPort>,
+    pub profile_fields:    Arc<dyn UserProfileFieldsRepository>,
 }
 
 pub async fn connect(database_url: &str, backend: &str) -> anyhow::Result<(Repos, DbPool)> {
@@ -41,10 +43,12 @@ pub async fn connect(database_url: &str, backend: &str) -> anyhow::Result<(Repos
             let (image_ref_command, image_ref_query) = postgres::create_image_ref(pool.clone());
             let (person_command, person_query) = postgres::create_person_adapter(pool.clone());
             let (search_command, search_port)  = postgres_search::create_search_adapter(pool.clone());
+            let pf = postgres::create_profile_fields_repo(pool.clone());
             Ok((Repos { movie: m, review: r, diary: d, stats: s, user: u,
                         import_session: is, import_profile: ip, movie_profile: mp, watchlist: wl,
                         image_ref_command, image_ref_query,
-                        person_command, person_query, search_command, search_port },
+                        person_command, person_query, search_command, search_port,
+                        profile_fields: pf },
                 DbPool::Postgres(pool)))
         }
         #[cfg(feature = "sqlite")]
@@ -54,10 +58,12 @@ pub async fn connect(database_url: &str, backend: &str) -> anyhow::Result<(Repos
             let (image_ref_command, image_ref_query) = sqlite::create_image_ref(pool.clone());
             let (person_command, person_query) = sqlite::create_person_adapter(pool.clone());
             let (search_command, search_port)  = sqlite_search::create_search_adapter(pool.clone());
+            let pf = sqlite::create_profile_fields_repo(pool.clone());
             Ok((Repos { movie: m, review: r, diary: d, stats: s, user: u,
                         import_session: is, import_profile: ip, movie_profile: mp, watchlist: wl,
                         image_ref_command, image_ref_query,
-                        person_command, person_query, search_command, search_port },
+                        person_command, person_query, search_command, search_port,
+                        profile_fields: pf },
                 DbPool::Sqlite(pool)))
         }
         #[cfg(not(feature = "sqlite"))]

crates/worker/src/main.rs

@@ -32,20 +32,22 @@ async fn main() -> anyhow::Result<()> {
     let (repos, db_pool) = db::connect(&database_url, &backend).await?;
     let (event_publisher_arc, consumer_arc) = event_bus::create(&db_pool).await?;
 
-    let image_ref_command = Arc::clone(&repos.image_ref_command);
-    let image_ref_query   = Arc::clone(&repos.image_ref_query);
-    let person_command    = Arc::clone(&repos.person_command);
-    let person_query      = Arc::clone(&repos.person_query);
-    let search_command    = Arc::clone(&repos.search_command);
-    let search_port       = Arc::clone(&repos.search_port);
+    let image_ref_command   = Arc::clone(&repos.image_ref_command);
+    let image_ref_query     = Arc::clone(&repos.image_ref_query);
+    let person_command      = Arc::clone(&repos.person_command);
+    let person_query        = Arc::clone(&repos.person_query);
+    let search_command      = Arc::clone(&repos.search_command);
+    let search_port         = Arc::clone(&repos.search_port);
+    let profile_fields_repo = Arc::clone(&repos.profile_fields);
 
     // Clone refs federation handler needs before ctx consumes them.
     #[cfg(feature = "federation")]
-    let (fed_movie_repo, fed_review_repo, fed_diary_repo, fed_user_repo, base_url, allow_registration) = (
+    let (fed_movie_repo, fed_review_repo, fed_diary_repo, fed_user_repo, fed_profile_fields_repo, base_url, allow_registration) = (
         Arc::clone(&repos.movie),
         Arc::clone(&repos.review),
         Arc::clone(&repos.diary),
         Arc::clone(&repos.user),
+        Arc::clone(&repos.profile_fields),
         app_config.base_url.clone(),
         app_config.allow_registration,
     );
@@ -76,6 +78,7 @@ async fn main() -> anyhow::Result<()> {
         import_profile_repository: repos.import_profile,
         movie_profile_repository:  repos.movie_profile,
         watchlist_repository:      repos.watchlist,
+        profile_fields_repository: Arc::clone(&profile_fields_repo),
         #[cfg(feature = "federation")]
         remote_watchlist_repository: fed_remote_watchlist_repo.clone(),
         person_command:            Arc::clone(&person_command),
@@ -172,6 +175,7 @@ async fn main() -> anyhow::Result<()> {
                 fed_review_store,
                 fed_remote_watchlist_repo,
                 fed_user_repo,
+                fed_profile_fields_repo,
                 fed_movie_repo,
                 fed_review_repo,
                 fed_diary_repo,
@@ -207,7 +211,7 @@ async fn main() -> anyhow::Result<()> {
 
 fn init_tracing() {
     let filter = std::env::var("RUST_LOG")
-        .unwrap_or_else(|_| "worker=info,application=info".to_string());
+        .unwrap_or_else(|_| "worker=info,application=info,activitypub_base=info".to_string());
     tracing_subscriber::registry()
         .with(tracing_subscriber::EnvFilter::new(filter))
         .with(tracing_subscriber::fmt::layer())