activity pub enhancements

Or just use fedify as noted in a comment https://fedify.dev/

TODOs to make AP support better

add nodeinfo (which should point to the instance endpoint then?) https://github.com/jhass/nodeinfo/blob/main/PROTOCOL.md
look into HTTP signing! This is necessary to federate with most other platforms, like mastodon
fix actor (and general) retrieval by changing/adding content type https://www.w3.org/TR/activitypub/#retrieving-objects
support activitypub content-type headers in fastify: maybe use https://fastify.dev/docs/latest/Reference/ContentTypeParser/#content-type-parser
send content-type headers in signed request util when passing a body
make outbox GET an ordered collection https://www.w3.org/TR/activitystreams-vocabulary/#dfn-orderedcollection
make inbox POST allow a single object. Maybe even force that? Might make delivery "easier" https://www.w3.org/TR/activitypub/#delivery
get verify.funfedi to clear (getting stuff with signatures). Signing is still weird, read into it here: https://funfedi.dev/testing_tools/http_signatures/ . Most likely sending the digest on non-post requests is the issue
remove versioning from ActivityPub controller. They won't be able to be changed, as they are used as IDs
test signing acceptance with services like mastodon
send back "Accept" activities for follows, to allow other platforms to follow game servers. Game servers themselves do NOT wait for follow accepts, as they will only form a treaty on mutual follow anyways -> doing this, but it doesnt work. Might be that mastodon expects the entire activity object to be inline instead of just referencing the objectId
look into exposing followers and following collections. This might make mastodon actually reflect accepted follows #741
validate signing from others (game as well as other AP instances) - this is necessary for the last verify.funfedi test https://docs.joinmastodon.org/spec/security/#http-sign
on outbox posting, target servers better (e.g. follow/unfollow only to the respective servers, as well as likes) Only things that belong to own trades (create, delete) should be shared to all
when starting to follow/a treaty, query the outbox to backfill previous activities. Prob necessary to add pagination and date markers for that
adjust outbox: only include create activities of notes that have not also been deleted already