Import stored certfps from Atheme as well.

There is no change in behavior since committing the transaction
already write(2)'s all the data to disk. But let's comply with
the official buntdb API.

This should have been done in 8b2f6de3e0, since we updated both
the database schema and the importer then.

* Advanced certfp support

Signed-off-by: Georg <georg@lysergic.dev>

* Moving certfp logic

Signed-off-by: Georg <georg@lysergic.dev>

* Cleaning up certfp logic

Signed-off-by: Georg <georg@lysergic.dev>

send `*` for WHOX o (oplevel) instead of `0`

Jobe points out that 0 is a valid oplevel in some contexts,
* is a better placeholder for "unimplemented".

anope2json, atheme2json: handle non-UTF8 data

Also ignore an unrecognized field type in anope

fix #1860

disallow initial $ in nicknames

fix #1858

CS AMODE changes should take immediate effect even if the nick
does not match the account.

The channel mode +R used to both prevent joins by unregistered users,
and prevent unregistered users who happened to be joined from speaking.
This changes the behavior so that +R only prevents joins:

1. This allows users who were invited or SAJOIN'ed to speak
2. To restore the old semantics, chanops can set +RM

It collides with the massmessage mask syntax. Reported by @emersion

make +C (no CTCP) a default channel mode

* Build container image on aarch64 platform

* Revert test code & correct typo

Co-authored-by: erin <erin@localhost>

Update docker repo location

- Environment variable prefix
- DNSBL repo URI
- Project and repo names in link to Docker-specific instructions
- Docker container and volume names in docker run command

change FAIL AUTHENTICATE VERIFICATION_REQUIRED to be a NOTE

See discussion on #1852

add FAIL AUTHENTICATE VERIFICATION_REQUIRED

fix some papercuts

From discussion with @emersion, this will help with UX if people try to
log into their unverified accounts.

Warn about banning a single IPv6 address

Account registrations pending verification should produce a logline and
send a sno.

CS PURGE should send a snomask

Send snomasks for HS SET

OpenSolaris / Illumos Service Management Facility (SMF) Service

Signed-off-by: Georg <georg@lysergic.dev>

NS SUSPEND now req 'ban' capabs

fix two WHO bugs

These should have been committed in 8218d1caab
but weren't.

fix #1833

fix casefolding issue in muting RELAYMSG

update dependencies for 2.9 window

Reported by @mogad0n; the mute mask was being case-canonicalized,
but the RELAYMSG identifier wasn't being case-canonicalized before
the check.