Bad words never show: a word filter and a report button, both editable by the admin #14

Goal (owner, 2026-10-20): complete, secure, public control of the real arm from the public forge URL, with a moderated community. Simple and amazing to use; every knob the owner might want is an admin setting.

Milestone 2. A deterministic filter on the server before a message is broadcast: a blocked-words list (admin setting, with a sensible default list), blocked links unless allowed, max repeats/caps; blocked messages are refused with a short reason to the sender only. Any signed-in user can report a message; reports show on /admin with Remove / Mute / Dismiss. Tests: a blocked word is refused and never broadcast; the list is editable and takes effect live; a report reaches /admin.

Ready again: pull #26 was closed because main moved under it and it could not be brought up to date. Conflicting files: Software/so101/bench/fake-serve.ts, Software/so101/src/lobby.ts, Software/so101/src/viewer.html.

Split into what is left: #241 (refuse links unless allowed, shouting and repeats), #242 (any signed-in user can report a line), and #243 (/admin triages reports with Remove, Mute and Dismiss, which waits on #242, #237 and #225). The blocked-words list already landed in src/word-filter.ts. This had been held as one large issue behind #225; #241 and #242 can start now.