fix(ap): protocol compliance — actor verification, on_unlike, Move, bto/bcc

- Add verify() to Accept/Reject (actor must match Follow target)
- Add verify() to Create/Update (actor must match attributedTo)
- Add verify() to Delete (actor domain must match object domain)
- Fix UpdateActivity passing wrapper id instead of object id to on_update
- Implement on_unlike (was no-op stub) — publishes LikeRemoved event
- BlockActivity now removes remote actor as follower, not just following
- Add MoveActivity (account migration) to InboxActivities enum
- Add bto/bcc fields to CreateActivity for blind DM support
- http_signature_compat(true) restricted to debug mode only
- Announce of non-local object logs debug instead of silent drop
- postgres-federation: get_followers/get_following_page/count_following
  now consistently filter by status='accepted'

crates/adapters/activitypub-base/src/service.rs

@@ -1373,6 +1373,8 @@ impl ActivityPubService {
                     object: object_json.clone(),
                     to: vec![],
                     cc: vec![],
+                    bto: vec![],
+                    bcc: vec![],
                 };
 
                 let sends = SendActivityTask::prepare(
@@ -1436,6 +1438,8 @@ impl domain::ports::OutboundFederationPort for ActivityPubService {
             object: note,
             to: vec![crate::urls::AS_PUBLIC.to_string()],
             cc: vec![local_actor.followers_url.to_string()],
+            bto: vec![],
+            bcc: vec![],
         };
         let sends = activitypub_federation::activity_sending::SendActivityTask::prepare(
             &activitypub_federation::protocol::context::WithContext::new_default(create),