fix: update systemd service documentation URL to baker-scripts (#14)

Update Documentation= URL in systemd service from bakerboy448 to
baker-scripts org.

[pre-commit.ci] pre-commit autoupdate (#8)

<!--pre-commit.ci start-->
updates:
- [github.com/pre-commit/pre-commit-hooks: v4.4.0 →
v6.0.0](pre-commit/pre-commit-hooks@v4.4.0...v6.0.0)
- https://github.com/psf/black →
https://github.com/psf/black-pre-commit-mirror
- [github.com/psf/black-pre-commit-mirror: 23.7.0 →
26.1.0](psf/black-pre-commit-mirror@23.7.0...26.1.0)
- [github.com/pycqa/flake8: 6.0.0 →
7.3.0](PyCQA/flake8@6.0.0...7.3.0)
- [github.com/pycqa/isort: 5.12.0 →
7.0.0](PyCQA/isort@5.12.0...7.0.0)
- [github.com/Yelp/detect-secrets: v1.4.0 →
v1.5.0](Yelp/detect-secrets@v1.4.0...v1.5.0)
- [github.com/pre-commit/mirrors-mypy: v1.4.1 →
v1.19.1](pre-commit/mirrors-mypy@v1.4.1...v1.19.1)
<!--pre-commit.ci end-->

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

chore: add CodeRabbit and gitleaks configs (#12)

## Summary
- Add .coderabbit.yaml for automated code review
- Add .gitleaks.toml for secret scanning

Standardizing configs across all baker-scripts repos.

fix: update all references from bakerboy448 to baker-scripts (#11)

## Summary
- Update GHCR image references in README.md and docker-compose.yml
- Update OCI labels in Dockerfile (source, documentation, vendor,
authors)
- **Critical**: Change hardcoded `IMAGE_NAME: bakerboy448/redditmodlog`
to dynamic `${{ github.repository_owner }}/redditmodlog` in
docker-build.yml
- Update vendor label in workflow

## Context
Repo was transferred from bakerboy448 to baker-scripts org. GHCR
packages don't transfer automatically. The workflow was hardcoding the
old org name, which would publish images to the wrong namespace.

v1.4.3 - Docker Improvements

Fixed:
- Add sqlite3 to Docker image for database inspection
- Properly route logs: INFO/DEBUG to stdout, WARNING/ERROR/CRITICAL to stderr
- Follows Unix convention for log stream separation

Changes:
- sqlite3 package added to runtime dependencies
- Custom logging handlers for proper stream routing
- Maintains all existing logging functionality

v1.4.2 - Wiki Recovery Tool

New Features:
- Wiki recovery script to restore historical data from wiki revisions
- Successfully tested with 254 entries recovered for opensignups
- Successfully tested with 299 entries recovered for usenet

Fixes:
- Database recovery after accidental deletion incident
- Historical modlog data preserved in wiki revisions

Docker:
- Containers now use separate databases per subreddit
- Configs moved to /.config/redditmodlog/ with rsnapshot backups
- archive_threshold_days set to 90 days (matching systemd config)

Hotfix v1.4.1: Fix Docker config file support

- Fixed s6 run script to pass --config /config/config.json
- Fixed s6 service symlink (was causing exec format error)
- Init script now validates config file OR environment variables
- Added troubleshooting tools (procps, htop, vim-tiny)
- Updated README with correct Docker deployment examples
- Improved healthcheck to verify Python process is running

Release v1.4.0: Docker containerization

Major Features:
- Multi-architecture Docker support (linux/amd64, linux/arm64)
- GitHub Container Registry publishing (ghcr.io)
- s6-overlay v3 for proper init and process management
- Environment variable configuration support
- Automated CI/CD pipeline with security scanning

Improvements:
- Repository reorganization (tests/ and scripts/ directories)
- Pre-commit hooks with type checking
- Simplified secrets baseline
- Enhanced documentation for Docker deployment

Technical:
- PUID/PGID support for flexible file permissions
- Startup validation for required environment variables
- Health checks for container monitoring
- SBOM generation and Trivy security scanning

Release v1.3.0: Automatic wiki size limit handling

Features:
- Automatic content trimming when approaching Reddit's 524KB wiki limit
- Smart date-based trimming to keep most recent entries
- Enhanced error reporting without debug mode

Fixes:
- Fixed 403 errors when wiki pages approach size limit
- Fixed OpenSignups wiki update failures
- Improved error messages for better troubleshooting

The bot now automatically removes older days when wiki content would exceed 90% of Reddit's limit, ensuring continuous operation without manual intervention.

security: enforce moderator anonymization to protect privacy

- Add mandatory anonymize_moderators=true enforcement
- Block application startup if anonymize_moderators=false is attempted
- Update documentation with security warnings
- Prevent accidental exposure of moderator identities in public wikis

BREAKING: anonymize_moderators=false is now permanently disabled for security