feat: add Skin market moderation controls

[bobleer]

Summary

• expose release yank and listing unpublish controls to authenticated Skin Market admins
• require a moderation reason, confirm irreversible actions, and surface request failures
• project current publication state (published, yanked, or unpublished) independently from the immutable review decision
• show downlisted submissions correctly in both the website and BitFun client instead of leaving them as Approved
• update submission timestamps on moderation so paginated history reflects the latest state

Root cause

submissions.status = approved records the historical review decision. Yank and unpublish only changed releases.yanked_at / listings.is_published, while submission APIs returned the review field alone. The API now joins those records and returns an additive publicationStatus; existing production rows are corrected without a migration.

Verification

• pnpm run fmt:rs
• cargo test -p bitfun-product-domains --no-default-features --features appearance-market
• cargo test -p bitfun-skin-market-service
• cargo test -p bitfun-services-integrations --no-default-features --features miniapp-market appearance_market::submit
• cargo check -p bitfun-skin-market-server
• cargo check -p bitfun-desktop
• pnpm run type-check:skin-market
• pnpm run test:skin-market
• pnpm run build:skin-market
• pnpm run type-check:web
• focused AppearanceMarketDialog tests
• pnpm run i18n:audit
• pnpm run appearance:contract-audit
• pnpm run theme:color-audit:all
• all 7 CI jobs passed
• production backup integrity, container revision, origin/public health, and authenticated web-session checks

Deployment

• deployed merged upstream commit 5157b8603e9b7627e45c884f5100852655bb0066 to the isolated Skin Market container
• production contains one historical approved-but-downlisted submission, exercising the fixed projection path
• no schema migration required