[#468] User UI for OAuth permissions restriction. Standardized storage format for `scopes` fields, updated usages.

Add /media to Caddy cache

See merge request pleroma/pleroma!791

Add keyword policy

See merge request pleroma/pleroma!794

Split hide_network only for local users

See merge request pleroma/pleroma!781

Mark streaming feature for iOS apps in readme

See merge request pleroma/pleroma!790

OAuth2 security fixes: redirect URI validation, "Mastodon-Local" security breach fix

See merge request pleroma/pleroma!793

(`POST /api/v1/apps` could create "Mastodon-Local" app wth any redirect_uris,
and if that happened before /web/login is accessed for the first time
then Pleroma used this externally created record with arbitrary
redirect_uris and client_secret known by creator).

Remove Pawoo apps from README.md

See merge request pleroma/pleroma!788

Mark streaming feature for Apps in README.md

See merge request pleroma/pleroma!789

hide_followings was renamed to hide_followers in the FE, but never synced up in the BE

See merge request pleroma/pleroma!787

This was a dirty regex replace which worked on my server

rich media cards: bugfixes and regression tests

See merge request pleroma/pleroma!785

Add admin and moderator badges to user view and make their visibility configurable

See merge request pleroma/pleroma!767

Adds a couple examples to docs/config.md for ExSyslogger and removes duplicate timestamps from default format.

See merge request pleroma/pleroma!784

Fix if clause in activity_pub user_view

See merge request pleroma/pleroma!783

update frontend

See merge request pleroma/pleroma!780