Core Rule Set: Ghost's remaining fields pass with words that name commands (closes #359)

Ghost 6.76.0 was sent the fields the Ghost unit had not recorded with
python3, powershell, ls -la and .htaccess. Fixes in ghost.conf:

- the rules of plain text, now eight with 932235, for staff profiles, setup,
  invitations, tiers, offers, recommendations, integrations, webhooks,
  feature image captions, members' comments, the CSV import's labels,
  ActivityPub, and the analytics' query fields;
- 932235 for the existing plain-text fields too, so "powershell & python3"
  passes there;
- filter skips six more command rules, for the post picker's
  title:~'powershell & python3';
- staff invitation addresses, email_segment and a tag's code injection.

Model: opus-5-5

README.md

@@ -610,8 +610,9 @@ lowers a client's limits by tag. See "Request tags" in [`SPEC.md`](SPEC.md).
       its searches, its file names, its account names, its comments and its
       documents;
     - `ghost`, whose fixes let through its filters, its searches, its names, its
-      email addresses, its code injection, its settings and a post saved from
-      its editor, HTML included.
+      email addresses, its code injection, its settings, its analytics, its
+      members' comments, ActivityPub and a post saved from its editor, HTML
+      included.
 - A random password, as a password manager makes one, gets through these forms:
     - signing in, signing up, and changing or resetting a password, on
       WordPress, Drupal, MediaWiki, Mastodon, Nextcloud, gitea and Ghost;