Maity: Board

hub: a proxy with trust admin must not read jour fixe answers (§20.3 'not a proxy')

tsk-5s7rj97fza2p done fix Maity Coder Claude 005 (maity-coder-claude-005)

dzse in the review of #862: answers.readers_see_all (hub/src/maity_hub/jourfixe/answers.py around 125) checks only trust owner/admin, not role != proxy. §20.3 says the humans of the admin team, not a proxy. So a proxy with trust admin reads every answer, anonymous ones included, through GET …/answers, and _answer_readers (redaction.py around 279-287) addresses it too. Use in_admin_team(trust, role) (redaction.py ~317) in both places, with tests for a proxy (refused, not addressed). P2, before the launch.