feat: formatted text, a list view, ticket details, public proposals and votes

Formatted text
- Descriptions, comments, replies and release notes render Markdown,
  sanitised with DOMPurify (tested against scripts, handlers and
  javascript: links). A pasted image is uploaded and written as
  ![name](attachment:<id>); the web fetches it with the reader's session,
  so it works on private projects. Every text box has a preview. The
  attachment upload now answers its attachmentId.

List view
- /p/:key/list: every ticket as rows, sortable by any column, filtered by
  text, open/closed, type, priority and assignee; status, priority and
  assignee change in place; bulk edit (the backlog's bar, now shared).

Ticket details
- Reactions on comments (GitHub's eight), for members and viewers.
- Duplicate a ticket: what it says, not where it stands.
- blockedBy: open tickets it waits for (BLOCKS / DEPENDS_ON), worked out
  when reading with one query per board or page; shown on cards, list
  rows and the ticket.

Public proposals
- A public project can take bug reports and ideas from anyone
  (acceptsProposals): POST /api/explore/projects/{project}/proposals and
  the form at /p/:key/proponer. They become tickets labelled «propuesta»,
  opened by TaskStream; a honeypot field and 5 per address every 15
  minutes keep spam out. No e-mail is asked: it would be public.

Votes
- Anyone signed in votes on a public project's tickets, members on a
  private one (voteIssue, PUT/DELETE /api/issues/{issue}/vote): votes and
  voted on each ticket, buttons on the ticket and the roadmap, a column
  in the list. The showcase carries votes and the open proposals.

MCP: vote_issue, duplicate_issue, react_to_comment; listings show
blockers and votes. Docs, Word and PDF updated; chat notifications
(Discord, Slack, Telegram) noted for later.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

apps/api/schema.gql

@@ -207,6 +207,9 @@ type Comment {
   id: ID!
   issueId: ID!
 
+  """In the order they are offered; only the ones somebody chose"""
+  reactions: [CommentReaction!]!
+
   """The top-level comment it answers; null for a top-level one"""
   replyTo: ID
   version: Int!
@@ -228,6 +231,14 @@ type CommentPage {
   total: Int!
 }
 
+"""One emoji on a comment"""
+type CommentReaction {
+  emoji: String!
+
+  """Who chose it"""
+  users: [UserRef!]!
+}
+
 type CountByAssignee {
   count: Int!
 
@@ -414,6 +425,11 @@ type Issue {
   area: String
   assignee: UserRef
   attachments: [Attachment!]!
+
+  """
+  Open tickets it waits for: the ones that block it and the ones it depends on
+  """
+  blockedBy: [IssueParent!]!
   checklist: [ChecklistItem!]!
   commentCount: Int!
   comments(limit: Int! = 50, offset: Int! = 0): CommentPage!
@@ -469,6 +485,12 @@ type Issue {
   updatedAt: String!
   version: Int!
 
+  """Whether I voted for it"""
+  voted: Boolean!
+
+  """How many want it done"""
+  votes: Int!
+
   """People following the ticket"""
   watchers: [UserRef!]!
 }
@@ -672,6 +694,11 @@ type Mutation {
   """Delete a sprint that never started; its tickets go back to the backlog"""
   deleteSprint(sprintId: ID!): CommandResult!
   deleteWebhook(webhookId: ID!): Boolean!
+
+  """
+  A new ticket like this one: what it says, not where it stands (the key comes in the result)
+  """
+  duplicateIssue(issueId: ID!): CommandResult!
   editComment(body: String!, commentId: ID!): CommandResult!
 
   """Relate tickets, e.g. FE DEPENDS_ON BE, QA TESTS FE"""
@@ -688,6 +715,9 @@ type Mutation {
   """Move a ticket in the backlog, between two others of the same project"""
   rankIssue(input: RankIssueInput!): CommandResult!
 
+  """React (👍 👎 😄 🎉 😕 ❤️ 🚀 👀) or take it back (on: false)"""
+  reactToComment(commentId: ID!, emoji: String!, on: Boolean!): CommandResult!
+
   """
   Remove a file from a ticket (whoever uploaded it, or an owner/admin). Upload with the REST API.
   """
@@ -750,6 +780,11 @@ type Mutation {
   updateSprint(input: UpdateSprintInput!): CommandResult!
   updateWebhook(input: UpdateWebhookInput!): Webhook!
 
+  """
+  Vote for a ticket (on) or take the vote back: anyone signed in on a public project, members on a private one
+  """
+  voteIssue(issueId: ID!, on: Boolean!): CommandResult!
+
   """
   Follow a ticket: be told when it moves, is reassigned or gets a comment
   """
@@ -805,6 +840,9 @@ type NotificationSettings {
 }
 
 type Project {
+  """Takes bug reports and ideas from anyone (while public)"""
+  acceptsProposals: Boolean!
+
   """
   Statistics of the last `days` days (7-365): created vs resolved, cumulative flow, cycle/lead time, throughput and QA
   """
@@ -1263,6 +1301,10 @@ input UpdateIssueInput {
 }
 
 input UpdateProjectInput {
+  """
+  Take bug reports and ideas from anyone through the public form (while public)
+  """
+  acceptsProposals: Boolean
   description: String
   isPublic: Boolean
   name: String