* Advanced certfp support

Signed-off-by: Georg <georg@lysergic.dev>

* Moving certfp logic

Signed-off-by: Georg <georg@lysergic.dev>

* Cleaning up certfp logic

Signed-off-by: Georg <georg@lysergic.dev>

send `*` for WHOX o (oplevel) instead of `0`

Jobe points out that 0 is a valid oplevel in some contexts,
* is a better placeholder for "unimplemented".

anope2json, atheme2json: handle non-UTF8 data

Also ignore an unrecognized field type in anope

fix #1860

disallow initial $ in nicknames

fix #1858

CS AMODE changes should take immediate effect even if the nick
does not match the account.

The channel mode +R used to both prevent joins by unregistered users,
and prevent unregistered users who happened to be joined from speaking.
This changes the behavior so that +R only prevents joins:

1. This allows users who were invited or SAJOIN'ed to speak
2. To restore the old semantics, chanops can set +RM

It collides with the massmessage mask syntax. Reported by @emersion

make +C (no CTCP) a default channel mode

* Build container image on aarch64 platform

* Revert test code & correct typo

Co-authored-by: erin <erin@localhost>

Update docker repo location

- Environment variable prefix
- DNSBL repo URI
- Project and repo names in link to Docker-specific instructions
- Docker container and volume names in docker run command

change FAIL AUTHENTICATE VERIFICATION_REQUIRED to be a NOTE

See discussion on #1852

add FAIL AUTHENTICATE VERIFICATION_REQUIRED

fix some papercuts

From discussion with @emersion, this will help with UX if people try to
log into their unverified accounts.

Warn about banning a single IPv6 address

Account registrations pending verification should produce a logline and
send a sno.

CS PURGE should send a snomask

Send snomasks for HS SET

OpenSolaris / Illumos Service Management Facility (SMF) Service

Signed-off-by: Georg <georg@lysergic.dev>

NS SUSPEND now req 'ban' capabs

fix two WHO bugs

These should have been committed in 8218d1caab
but weren't.

fix #1833

fix casefolding issue in muting RELAYMSG

update dependencies for 2.9 window

Reported by @mogad0n; the mute mask was being case-canonicalized,
but the RELAYMSG identifier wasn't being case-canonicalized before
the check.

See #1822