Core Rule Set: Ghost's remaining fields pass with words that name commands (closes #359)

Ghost 6.76.0 was sent the fields the Ghost unit had not recorded with
python3, powershell, ls -la and .htaccess. Fixes in ghost.conf:

- the eight rules that refused words naming commands and files, now with
  932235, for staff profiles, setup, invitations, tiers, offers,
  recommendations, integrations, webhooks, feature images, members'
  comments, the CSV import's labels, ActivityPub and the analytics' query
  fields;
- 932235 for the existing plain-text fields and code injection, so
  "powershell & python3" passes there and as a site's title;
- filter skips six more command rules, for the post picker's
  title:~'powershell & python3';
- staff invitation addresses, email_segment, a tag's canonical_url, and
  ActivityPub's handles, actorUri and domain;
- a tag's code injection skips what a post's does, 941110 included.

Model: opus-5-5

README.md

@@ -609,9 +609,9 @@ lowers a client's limits by tag. See "Request tags" in [`SPEC.md`](SPEC.md).
     - `nextcloud`, whose fixes let through its sync client, its WebDAV methods,
       its searches, its file names, its account names, its comments and its
       documents;
-    - `ghost`, whose fixes let through its filters, its searches, its names, its
-      email addresses, its code injection, its settings and a post saved from
-      its editor, HTML included.
+    - `ghost`, whose fixes let through the text its admin and members type, its
+      analytics, its code injection, ActivityPub and a post saved from its
+      editor, HTML included.
 - A random password, as a password manager makes one, gets through these forms:
     - signing in, signing up, and changing or resetting a password, on
       WordPress, Drupal, MediaWiki, Mastodon, Nextcloud, gitea and Ghost;