feat: formatted text, a list view, ticket details, public proposals and votes

Formatted text
- Descriptions, comments, replies and release notes render Markdown,
  sanitised with DOMPurify (tested against scripts, handlers and
  javascript: links). A pasted image is uploaded and written as
  ![name](attachment:<id>); the web fetches it with the reader's session,
  so it works on private projects. Every text box has a preview. The
  attachment upload now answers its attachmentId.

List view
- /p/:key/list: every ticket as rows, sortable by any column, filtered by
  text, open/closed, type, priority and assignee; status, priority and
  assignee change in place; bulk edit (the backlog's bar, now shared).

Ticket details
- Reactions on comments (GitHub's eight), for members and viewers.
- Duplicate a ticket: what it says, not where it stands.
- blockedBy: open tickets it waits for (BLOCKS / DEPENDS_ON), worked out
  when reading with one query per board or page; shown on cards, list
  rows and the ticket.

Public proposals
- A public project can take bug reports and ideas from anyone
  (acceptsProposals): POST /api/explore/projects/{project}/proposals and
  the form at /p/:key/proponer. They become tickets labelled «propuesta»,
  opened by TaskStream; a honeypot field and 5 per address every 15
  minutes keep spam out. No e-mail is asked: it would be public.

Votes
- Anyone signed in votes on a public project's tickets, members on a
  private one (voteIssue, PUT/DELETE /api/issues/{issue}/vote): votes and
  voted on each ticket, buttons on the ticket and the roadmap, a column
  in the list. The showcase carries votes and the open proposals.

MCP: vote_issue, duplicate_issue, react_to_comment; listings show
blockers and votes. Docs, Word and PDF updated; chat notifications
(Discord, Slack, Telegram) noted for later.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

libs/api/tracker/domain/src/lib/project/project.ts

@@ -32,6 +32,11 @@ export interface ProjectProps {
   description: string | null;
   /** Anyone (even without signing in) can read it. Absent in old projects: private. */
   isPublic?: boolean;
+  /**
+   * Takes bug reports and ideas from anyone, through a public form (only
+   * while it is public). Absent in old projects: no.
+   */
+  acceptsProposals?: boolean;
   ownerId: string;
   members: ProjectMember[];
   /** Absent in projects created before settings existed: defaults apply. */
@@ -49,6 +54,7 @@ export class Project extends VersionedAggregateRoot implements ProjectProps {
   public name!: string;
   public description: string | null = null;
   public isPublic = false;
+  public acceptsProposals = false;
   public ownerId!: string;
   public members: ProjectMember[] = [];
   public settings: ProjectSettings = defaultProjectSettings();
@@ -104,13 +110,19 @@ export class Project extends VersionedAggregateRoot implements ProjectProps {
 
   updateDetails(
     actorId: string,
-    changes: { name?: string; description?: string | null; isPublic?: boolean },
+    changes: {
+      name?: string;
+      description?: string | null;
+      isPublic?: boolean;
+      acceptsProposals?: boolean;
+    },
   ): void {
     this.assertCanManage(actorId);
     const patch: {
       name?: string;
       description?: string | null;
       isPublic?: boolean;
+      acceptsProposals?: boolean;
     } = {};
     if (changes.name !== undefined) {
       const name = changes.name.trim();
@@ -123,6 +135,11 @@ export class Project extends VersionedAggregateRoot implements ProjectProps {
     }
     if (changes.isPublic !== undefined && changes.isPublic !== this.isPublic)
       patch.isPublic = changes.isPublic;
+    if (
+      changes.acceptsProposals !== undefined &&
+      changes.acceptsProposals !== this.acceptsProposals
+    )
+      patch.acceptsProposals = changes.acceptsProposals;
     if (Object.keys(patch).length === 0) return;
     this.apply(new ProjectUpdatedEvent(actorId, this.id, patch));
   }
@@ -213,6 +230,7 @@ export class Project extends VersionedAggregateRoot implements ProjectProps {
     this.name = project.name;
     this.description = project.description;
     this.isPublic = project.isPublic ?? false;
+    this.acceptsProposals = project.acceptsProposals ?? false;
     this.ownerId = project.ownerId;
     this.members = project.members.map((m) => ({ ...m }));
     this.settings = structuredClone(