feat: atomic social local writes, remote review enrichment

SocialCommand methods take events. Local follow ops = one FollowCommand::apply
tx (rows + events). k_ap path (remote, block/unblock): best-effort publish in
CompositeSocialAdapter after k_ap write; not atomic, k_ap owns tx.
save_remote_review takes events, enqueued in same tx via
sqlite::persistence::enqueue_events. Deps drop event_publisher: social
command, ReviewObjectHandler.

Remaining .publish( sites:
announce-only: users/delete_account UserDeleted, person/get + get_credits
PersonEnrichmentRequested, jobs/enrichment_staleness, http-axum search,
ImageStored (sync_poster, poster_sync_handler, image-converter backfill,
update_profile; object storage), federation_event_bridge (handler reaction),
nats relay (transport).
non-atomic by necessity: CompositeSocialAdapter::announce (k_ap-owned write).
Everything else rides its write.

crates/application/tests/users/get_page_viewer_test.rs

@@ -35,11 +35,11 @@ async fn get_page_viewer_reports_pending_follower_count() {
     let owner_id = UserId::from_uuid(owner_uuid);
     let target = FollowTarget::Identity(SocialIdentity::Local(owner_id.clone()));
     b.social_command
-        .follow(&UserId::from_uuid(follower1), &target)
+        .follow(&UserId::from_uuid(follower1), &target, &[])
         .await
         .unwrap();
     b.social_command
-        .follow(&UserId::from_uuid(follower2), &target)
+        .follow(&UserId::from_uuid(follower2), &target, &[])
         .await
         .unwrap();