Comment moderation: require approval before comments appear live

[tystar86]

Goal

Move from immediate public visibility for new comments to an approval-gated model, with a proper moderation workflow.

Background

Today comments may be visible everywhere as soon as they are created. This issue tracks product and engineering work to:

• Require moderator/admin approval (or equivalent policy) before a comment is shown on published posts, in public API list endpoints, dashboard aggregates, and the UI.
• Build moderation tools: queue of pending comments, approve/reject (with optional reason), audit/history, and role-based access (e.g. moderator/admin).
• Align counts and rankings (dashboard stats, comment counts, "most commented", likes on comments) with approved-only visibility rules once moderation is enforced.

Scope (suggested)

• Policy: default pending vs auto-approved for trusted users (if any)
• API: filter unapproved comments from public reads; privileged reads for mods
• Admin or in-app moderation UI
• Notifications or activity feed for moderators (optional follow-up)
• Tests and docs for the new lifecycle

Tracking

Linear: https://linear.app/tystar/issue/TYS-185/comment-moderation-require-approval-before-comments-appear-live