:shield: Report, block, filter and terms for user content; new privacy policy and terms; OpenStreetMap tiles

What App Review guideline 1.2 asks of an app with user content: - Reports of listings, comments and people (POST /api/reports), emailed to support straight away. - Blocks (/api/blocks): a blocked person's listings, comments and activity are hidden, their requests are withdrawn, and they can no longer ask for or comment on the blocker's things. - A whole-word filter (config/content_filter.yml) on listing titles, descriptions and comments, in all seven languages. - App users must accept the terms (POST /api/me/accept_terms) before they post, comment or ask for things. The privacy policy now names every service that handles data (Hetzner, Resend, OpenAI for photo suggestions, the sign-in providers), how long data is kept and how to delete an account; the terms state zero tolerance for objectionable content and how reports are handled. Both are now in all seven languages instead of English only. Maps use OpenStreetMap's tiles, with the attribution they require, instead of Carto.