Replace the placeholder `authorHandle: did` with separate `did`,
`handle`, and `displayName` fields populated via the Bluesky public
profile API. Profiles are cached per-DID to avoid redundant lookups.

Also renames the item types in atproto-setup from "Bluesky" to "atproto"
and adds `did` and `displayName` to the post schema.

# Conflicts:
#	README.md
#	server/package.json

Collect a random cross-section of up to 20 posts from the firehose
using reservoir-style replacement. Sampling is independent of the
item rate limit so the buffer stays populated even when throughput
is high. This is groundwork for the report submission added next.

Picks a random post from the sample buffer every 60 seconds and
submits it to /api/v1/report using the post's author DID as the
reporter. Requires --user-type-id (from atproto:setup). Reports are
skipped gracefully if the arg is omitted. Dry-run mode supported.

Reports now go through the same token-bucket pattern as items: each
incoming post attempts to consume a report token, with a configurable
--report-rate-limit flag (default: 1/min). This removes the sample
buffer and the fixed setInterval in favor of something simpler and
more flexible.

bsky.app blocks direct embedding (X-Frame-Options: SAMEORIGIN), so the
review iframe needs a proxy. atproto-proxy.mts is a minimal Node HTTP
server (port 4000) that fetches post data from the Bluesky public API
and renders it as a standalone HTML page, including postMessage support
for the review UI's blur/grayscale wellness settings.

Also documents VITE_CONTENT_URL_PATTERN=bsky.app as required in
client/.env for Bluesky URLs to trigger the iframe in the first place.

Adds five optional embed fields to the atproto Post item type schema
(embedType, embedUrl, embedTitle, embedDescription, embedThumb) so Coop
rules can match on linked URLs and link preview content.

Also adds --post-type-id / --user-type-id flags to atproto-setup so it
can be run against an existing org to update item types rather than
always creating new ones. Passes the full schema on update to avoid
relying on merge behavior.

Fixes "Bluesky" → "AT Protocol" in user-facing strings in the setup
script and README.

Extends BlueskyPost and CoopItem to capture embed data from raw AT
Protocol firehose records. postToCoopItem() now maps embedType for all
embed types, and embedUrl/embedTitle/embedDescription for external link
embeds. embedThumb is omitted since blob URLs aren't resolved in raw
firehose records.

Also fixes "Bluesky" → "atproto" / "AT Protocol" in comments and option
descriptions.

Adds renderEmbed() to the proxy, handling all five AT Protocol embed
types: external link cards (thumbnail, title, description, hostname),
image grids (up to 4 images, 1- or 2-column), video thumbnails with
play overlay, quoted posts, and recordWithMedia. Unknown embed types
return empty string for forward compatibility.

Also fixes "Bluesky" → "atproto"/"bsky.app" terminology in the proxy's
user-facing strings.

Applying the filter to `document.body` blurred the entire iframe—text,
author name, card border, everything. Targeting only `img` elements via
a CSS custom property (`--img-filter`) keeps text and layout readable
while still blurring images and video/link card thumbnails.

Moderators need a way to reveal blurred images without toggling the blur
setting entirely. Hovering over an image now temporarily removes the
filter, with the existing transition making the reveal smooth.