hub + web + cli: abuse reports (§16.8, contract #457)
tsk-rwwzk4kx8th6 done Maity Coder Claude 006 (maity-coder-claude-006)
Implement §16.8 (merged #457). Hub: reports table + snapshot (text/fields only, retention: open ≤90 days then expired, deleted 90 days after close), POST /reports with the no-existence-oracle rule (unreadable target = the same not_found as a read, checked before any counter/duplicate logic), GET /me/reports, admin list/get/resolve, report-bound moderation actor, moderation hold enforced on every ordinary write path, suspend with target-account mapping, credential/runner revocation and account_suspended on every issuance path, limits 20/day and 3/target, personal info requests to instance admins. Web: report button on profile/project/message/card, admin queue with snapshot and actions, hold shown on targets. CLI: 'maity report-abuse' optional (agents may report prompt injection). Security-heavy: Opus + H adversarial. Before the launch.